Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5205) Medium WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9033) Medium WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5731) Medium WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6897) Medium WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6819) Medium WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28040) Medium WordPress Cryptographic Issues Vulnerability (CVE-2009-3622) Medium WordPress Cryptographic Issues Vulnerability (CVE-2013-2173) Medium WordPress Cryptographic Issues Vulnerability (CVE-2014-9037) Medium WordPress CVE-2012-0937 Vulnerability (CVE-2012-0937) Medium WordPress CVE-2020-25286 Vulnerability (CVE-2020-25286) Medium WordPress CVE-2023-5561 Vulnerability (CVE-2023-5561) Medium WordPress CVE-2023-39999 Vulnerability (CVE-2023-39999) Medium WordPress database credentials disclosure Medium WordPress Data Processing Errors Vulnerability (CVE-2014-9034) Medium WordPress Direct Request ('Forced Browsing') Vulnerability (CVE-2005-1688) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-0191) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-0195) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3126) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3128) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3818) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4898) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2202) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5730) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5487) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5610) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-17671) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-29450) Medium WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-39200) Medium WordPress Improper Access Control Vulnerability (CVE-2015-5623) Medium WordPress Improper Authentication Vulnerability (CVE-2009-2334) Medium WordPress Improper Authentication Vulnerability (CVE-2014-0166) Medium WordPress Improper Authentication Vulnerability (CVE-2022-43504) Medium WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-3890) Medium WordPress Improper Input Validation Vulnerability (CVE-2008-4106) Medium WordPress Improper Input Validation Vulnerability (CVE-2009-2431) Medium WordPress Improper Input Validation Vulnerability (CVE-2011-3127) Medium WordPress Improper Input Validation Vulnerability (CVE-2011-4957) Medium WordPress Improper Input Validation Vulnerability (CVE-2013-2204) Medium WordPress Improper Input Validation Vulnerability (CVE-2013-5738) Medium WordPress Improper Input Validation Vulnerability (CVE-2014-9038) Medium WordPress Improper Input Validation Vulnerability (CVE-2016-9263) Medium WordPress Improper Input Validation Vulnerability (CVE-2017-6815) Medium WordPress Improper Input Validation Vulnerability (CVE-2018-20152) Medium WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0196) Medium WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0615) Medium WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7169) Medium WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8943) Medium WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-2745) Medium WordPress Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-6762) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-4139) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5105) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5106) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6677) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0192) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0193) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0617) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0618) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1304) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2068) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-3233) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5278) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2851) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4536) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5294) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5295) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4956) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0782) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2403) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2404) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3414) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6633) Medium WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0236) Medium 1...100101102103...107 101 / 107
