Known vulnerabilities in WordPress 3.9.12 - page 2

Software: WordPress
Version: 3.9.12
Software CPE: cpe:2.3:a:wordpress_org:wordpress:*:*:*:*:*:*:*:*
Total vulnerabilities: 60
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting WordPress version 3.9.12 WordPress 3.9.12 is affected by 60 vulnerabilities: 6 high, 17 medium, 37 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59290 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-21661
CWE-89 High
Public exploit available
No
3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3 07.01.2022 SB2022010706
SB2022011113
SB2022010719
and 2 more
#VU59289 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21663
CWE-94 Low
No
No
3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3 07.01.2022 SB2022010706
SB2022011113
SB2022010719
and 2 more
#VU48036 - Permissions, Privileges, and Access Controls
CVE-2020-28035
CWE-264 Medium
No
No
3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2 30.10.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU29009 - Improper Access Control
CWE-284 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
#VU29008 - Permissions, Privileges, and Access Controls
CVE-2020-4050
CWE-264 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29007 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-4048
CWE-601 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4049
CWE-79 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4047
CWE-79 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4046
CWE-79 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU27444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
#VU27443 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11026
CWE-79 Low
No
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27442 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11029
CWE-79 Medium
No
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11030
CWE-79 Low
No
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11025
CWE-79 Low
No
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27439 - Improper Access Control
CVE-2020-11028
CWE-284 Low
No
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27438 - Weak password recovery mechanism
CVE-2020-11027
CWE-640 High
Public exploit available
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU24143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16780
CWE-79 Low
No
No
4.5.20, 4.6.17, 4.7.16, 4.8.12, 4.9.13, 5.0.8, 5.1.4, 5.2.5, 5.3.1 08.01.2020 SB2019121301
SB2020010818
SB2020050617
#VU21788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17672
CWE-79 Low
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21787 - Server-Side Request Forgery (SSRF)
CVE-2019-17669
CWE-918 Medium
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17674
CWE-79 Low
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617


Showing elements 21 - 40 out of 60