Known vulnerabilities in WordPress 3.9.12 - page 2
Vendor:
WordPress.ORG
Software:
WordPress
Version:
3.9.12
Software CPE:
cpe:2.3:a:wordpress_org:wordpress:*:*:*:*:*:*:*:*
Website:
https://wordpress.org/
Total vulnerabilities:
60
Public exploits:
5
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
4.7.35
4.8.30
4.9.31
5.0.27
5.1.24
5.2.26
5.3.23
5.4.21
5.5.20
5.6.19
5.7.17
5.8.15
5.9.16
6.0.14
6.1.12
6.2.11
6.3.10
6.4.10
6.5.10
6.6.7
6.7.7
7.0.4
6.9.7
6.8.8
7.0.3
6.9.6
6.8.7
6.7.6
6.6.6
6.5.9
6.4.9
6.3.9
6.2.10
6.1.11
6.0.13
5.9.15
5.9.14
5.8.14
5.7.16
5.6.18
5.5.19
5.4.20
5.3.22
5.2.25
5.1.23
5.0.26
4.9.30
4.8.29
4.7.34
6.5.1
3.9.38
7.0.2
6.9.5
6.8.6
7.0.1
6.0.12
4.7.33
6.9.4
6.9.3
6.9.2
6.9.1
6.8.5
6.8.4
6.7.5
6.6.5
6.5.8
6.4.8
6.3.8
6.2.9
6.1.10
5.9.13
5.8.13
5.7.15
5.6.17
5.5.18
5.4.19
5.3.21
5.2.24
5.1.22
5.0.25
4.9.29
4.8.28
4.7.32
6.9
5.5.17
5.4.18
5.3.20
5.2.23
5.1.21
5.0.24
4.9.28
4.8.27
4.7.31
6.8.3
6.7.4
6.6.4
6.5.7
6.4.7
6.3.7
6.2.8
6.1.9
6.0.11
5.9.12
5.8.12
5.7.14
5.6.16
6.7.3
6.6.3
6.5.6
6.4.6
6.3.6
6.2.7
6.1.8
6.0.10
5.9.11
5.8.11
5.7.13
5.6.15
5.5.16
5.4.17
5.3.19
5.2.22
5.1.20
5.0.23
4.9.27
4.8.26
4.7.30
4.6.30
6.8.2
4.5.33
4.4.34
4.3.35
4.2.39
4.1.42
6.8.1
6.8
6.7.2
6.7.1
6.7
6.6.2
6.6.1
6.6
6.5.5
6.4.5
6.3.5
6.2.6
6.1.7
6.0.9
5.9.10
5.8.10
5.7.12
5.6.14
5.5.15
5.4.16
5.3.18
5.2.21
5.1.19
5.0.22
4.9.26
4.8.25
4.7.29
4.6.29
4.5.32
4.4.33
4.3.34
4.2.38
4.1.41
6.5.4
6.5.3
6.0.8
6.5.2
6.4.4
6.3.4
6.2.5
6.1.6
6.5
6.4.3
6.3.3
6.2.4
6.1.5
6.0.7
5.9.9
5.8.9
5.7.11
5.6.13
5.5.14
5.4.15
5.3.17
5.2.20
5.1.18
5.0.21
4.9.25
4.8.24
4.7.28
4.6.28
4.5.31
4.4.32
4.3.33
4.2.37
4.1.40
6.4.2
6.4.1
6.4
4.3.32
4.2.36
4.1.39
6.3.2
6.2.3
6.1.4
6.0.6
5.9.8
5.8.8
5.7.10
5.6.12
5.5.13
5.4.14
5.3.16
5.2.19
5.1.17
5.0.20
4.9.24
4.8.23
4.7.27
4.6.27
4.5.30
4.4.31
6.3.1
6.3
5.9.7
6.2.2
6.1.3
6.0.5
4.9.23
4.8.22
4.7.26
4.6.26
4.5.29
4.4.30
4.3.31
4.2.35
4.1.38
6.2.1
6.1.2
6.0.4
5.9.6
5.8.7
5.7.9
5.6.11
5.5.12
5.4.13
5.3.15
5.2.18
5.1.16
5.0.19
6.2
4.0.38
3.9.40
3.8.41
3.7.41
6.1.1
6.1
6.0.3
5.9.5
5.8.6
5.7.8
5.6.10
5.5.11
5.4.12
5.3.14
5.2.17
5.1.15
5.0.18
4.9.22
4.8.21
4.7.25
4.6.25
4.5.28
4.4.29
4.3.30
4.2.34
4.1.37
4.0.37
3.9.39
3.8.40
3.7.40
6.0.2
5.9.4
5.8.5
5.7.7
5.6.9
5.5.10
5.4.11
5.3.13
5.2.16
5.1.14
5.0.17
4.9.21
4.8.20
4.7.24
4.6.24
4.5.27
4.4.28
4.3.29
4.2.33
4.1.36
4.0.36
3.9.37
3.8.39
3.7.39
6.0.1
6.0
5.9.3
5.9.2
5.8.4
5.7.6
5.6.8
5.5.9
5.4.10
5.3.12
5.2.15
5.1.13
5.0.16
4.9.20
4.8.19
4.7.23
4.6.23
4.5.26
4.4.27
4.3.28
4.2.32
4.1.35
4.0.35
3.9.36
3.8.38
3.7.38
5.9.1
5.9
4.0.34
3.9.35
3.8.37
3.7.37
5.8.3
5.7.5
5.6.7
5.5.8
5.4.9
5.3.11
5.2.14
5.1.12
5.0.15
4.9.19
4.8.18
4.7.22
4.6.22
4.5.25
4.4.26
4.3.27
4.2.31
4.1.34
5.4.8
5.3.10
5.2.13
5.8.2
5.7.4
5.6.6
5.5.7
5.1.11
5.0.14
5.8 beta 2
5.8 beta 1
5.3.9
5.8.1
5.7.3
5.6.5
5.5.6
5.4.7
5.2.12
5.8
5.7.2
5.6.4
5.5.5
5.4.6
5.3.8
5.2.11
5.1.10
5.0.13
4.9.18
4.8.17
4.7.21
4.6.21
4.5.24
4.4.25
4.3.26
4.2.30
4.1.33
4.0.33
3.9.34
3.8.36
3.7.36
5.7.1
5.6.3
5.5.4
5.4.5
5.3.7
5.2.10
5.1.9
5.0.12
4.9.17
4.8.16
4.7.20
5.7
5.6.2
5.6.1
5.6
5.5.3
5.4.4
5.3.6
5.2.9
5.1.8
5.5.2
4.7.19
4.6.20
4.5.23
4.4.24
4.3.25
4.2.29
4.1.32
4.0.32
3.9.33
3.8.35
3.7.35
5.4.3
5.3.5
5.2.8
5.1.7
5.0.11
4.9.16
4.8.15
5.5.1
5.5
8.0
7.0
4.4.23
4.3.24
4.2.28
4.1.31
4.0.31
3.9.32
3.8.34
3.7.34
4.5.22
4.6.19
4.7.18
4.8.14
4.9.15
5.0.10
5.1.6
5.2.7
5.3.4
5.4.2
4.4.22
4.4.21
4.3.23
4.3.22
4.2.27
4.2.26
4.1.30
4.1.29
4.0.30
4.0.29
3.9.31
3.9.30
3.8.33
3.8.32
3.7.33
3.7.32
4.5.21
4.6.18
4.7.17
4.8.13
4.9.14
5.0.9
5.1.5
5.2.6
5.3.3
5.4.1
5.4
5.3.2
4.5.20
4.6.17
4.7.16
4.8.12
4.9.13
5.0.8
5.1.4
5.2.5
5.3.1
5.3
4.3.21
4.2.25
4.1.28
4.0.28
3.9.29
3.8.31
3.7.31
4.4.20
4.5.19
4.6.16
4.7.15
4.8.11
4.9.12
5.0.7
5.1.3
5.2.4
4.3.20
4.2.24
4.1.27
4.0.27
3.9.28
3.8.30
3.7.30
4.4.19
4.5.18
4.6.15
4.7.14
4.8.10
4.9.11
5.0.6
5.1.2
5.2.3
5.2
5.2.1
5.2.2
4.8.7
4.8.6
4.8.5
4.7.11
4.7.10
4.7.9
4.6.12
4.6.11
4.6.10
4.5.15
4.5.14
4.5.13
3.8.29
3.8.28
3.8.27
3.8.26
3.8.25
3.7.29
3.7.28
3.7.27
3.7.26
3.7.25
4.4.16
4.4.15
4.4.14
4.3.17
4.3.16
4.3.15
4.2.23
4.2.22
4.2.21
4.2.20
4.2.19
4.1.26
4.1.25
4.1.24
4.1.23
4.1.22
4.0.26
4.0.25
4.0.24
4.0.23
4.0.22
3.9.27
3.9.26
3.9.25
3.9.24
3.9.23
4.7.13
4.6.14
4.5.17
4.4.18
4.3.19
5.1.1
5.0.5
5.0.4
4.9.10
4.8.9
5.1
5.0.3
5.0.2
4.9.9
4.8.8
4.7.12
4.6.13
4.5.16
4.4.17
4.3.18
5.0.1
5.0
4.9.8
4.9.7
4.9.6
4.9.3
4.9.5
4.9.4
4.9.2
3.7.24
3.8.24
3.9.22
4.0.21
4.1.21
4.2.18
4.3.14
4.4.13
4.5.12
4.6.9
4.7.8
4.8.4
4.9.1
4.9
3.7.23
3.8.23
3.9.21
4.0.20
4.1.20
4.2.17
4.3.13
4.4.12
4.5.11
4.6.8
4.7.7
4.8.3
3.7.22
3.8.22
3.9.20
4.0.19
4.1.19
4.2.16
4.3.12
4.4.11
4.5.10
4.6.7
4.7.6
4.8.2
4.8.1
3.7.21
3.8.21
3.9.19
4.0.18
4.1.18
4.2.15
4.3.11
4.4.10
4.5.9
4.6.6
4.8
4.7.5
3.7.20
3.8.20
3.9.18
4.0.17
4.1.17
4.2.14
4.3.10
4.4.9
4.5.8
4.6.5
4.7.4
3.7.19
3.8.19
3.9.17
4.0.16
4.1.16
4.2.13
4.3.9
4.4.8
4.5.7
4.6.4
4.7.3
3.7.18
3.8.18
3.9.16
4.0.15
4.1.15
4.2.12
4.3.8
4.4.7
4.5.6
4.6.3
4.7.2
3.7.17
3.8.17
3.9.15
4.0.14
4.1.14
4.2.11
4.3.7
4.4.6
4.5.5
4.6.2
4.7.1
4.7
3.7.16
3.8.16
3.9.14
4.0.13
4.1.13
4.2.10
4.3.6
4.4.5
4.5.4
4.6.1
4.4.0
4.3.0
3.9.0
1.6.2
3.5.0
3.4.0
-
1.2.4
1.2.3
2.9.1.1
1.2.5
1.1.1
1.3.3
1.3.2
2.8.5.1
2.8.5.2
1.3
2.0.9rc1
2.1.1beta
0.72
1.4
1.6
0.711
1.3.1
2.1.3 rc2
2.0.10 rc2
2.2 revision5003
2.2.0
2.2 revision5002
2.0.10 rc1
2.1.3 rc1
2.0.3
2.0.2
0.71
0.6.2
0.6.2.1
1.0
1.0.1
1.5
1.2
0.70
0.7
4.6
4.2.9
3.6.1
3.4.2
3.1.1
3.9.12
2.0
2.2.2
4.2.6
3.7
2.3.2
4.4
1.5.1
2.5
4.1
2.8.2
4.0.2
3.0
2.0.8
4.0.4
4.0
2.6
4.5
4.5.1
3.7.13
4.4.3
2.8.6
1.5.1.3
3.7.15
4.1.7
3.3
2.8.1
3.0.1
3.8.6
2.3.1
1.0-platinum
3.1.4
2.6.1
2.1
3.7.14
3.8.10
3.5
1.0.2
1.5-strayhorn
3.1.2
3.7.12
3.7.10
3.7.3
2.6.2
4.4.2
1.5.1.2
2.1.3
2.9.2
4.2
1.5.2
3.7.8
4.2.1
3.0.4
4.0.9
3.8
3.7.1
2.8.3
0.71-gold
2.9.1
3.9.5
4.1.1
3.0.6
3.8.7
3.8.13
2.6.5
4.0.1
4.1.5
3.2
3.1
2.1.1
3.8.9
3.8.2
3.3.3
1.2.1
3.5.2
3.9.7
1.2.2
3.3.1
3.0.5
2.6.3
3.3.2
2.8
2.7.1
4.0.10
3.8.11
4.1.8
4.1.12
2.3
3.8.1
3.9.1
4.0.12
4.0.7
4.3.5
3.4
3.0.3
4.1.3
3.8.15
2.0.11
2.2
3.7.9
4.3.4
4.3.3
4.0.11
2.9
3.9.8
1.5.1.1
4.3.2
4.2.8
2.1.2
2.2.1
3.7.6
2.0.6
4.0.8
3.7.7
4.2.4
4.1.4
2.5.1
3.7.11
3.5.1
3.9.13
1.0.2-blakey
3.1.3
3.7.4
2.0.7
3.4.1
3.9.11
2.3.3
3.8.14
3.8.12
4.2.5
3.7.2
4.0.6
2.0.1
4.1.6
2.7
4.0.5
4.1.10
3.9.6
3.0.2
2.2.3
4.4.1
1.2-delta
3.9.2
3.2.1
3.6
4.1.2
4.2.2
1.0.1-miles
4.0.3
2.0.10
3.9.4
3.8.3
3.9.10
4.4.4
2.0.9
3.9
3.8.5
2.0.5
1.2-mingus
3.7.5
4.1.9
2.8.4
3.9.3
4.1.11
3.8.8
3.8.4
4.3.1
3.9.9
4.3
2.8.5
4.2.3
2.0.4
4.2.7
4.5.3
4.5.2
Vulnerabilities (60)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU59290 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-21661 |
CWE-89 | High | 3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3 | 07.01.2022 |
SB2022010706 SB2022011113 SB2022010719 and 2 more |
||
| #VU59289 - Improper Control of Generation of Code ('Code Injection') CVE-2022-21663 |
CWE-94 | Low | 3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3 | 07.01.2022 |
SB2022010706 SB2022011113 SB2022010719 and 2 more |
||
| #VU48036 - Permissions, Privileges, and Access Controls CVE-2020-28035 |
CWE-264 | Medium | 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2 | 30.10.2020 |
SB2020103007 SB2020110901 SB2020110930 and 5 more |
||
| #VU29009 - Improper Access Control |
CWE-284 | Low | 3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 | 12.06.2020 |
SB2020061210 |
||
| #VU29008 - Permissions, Privileges, and Access Controls CVE-2020-4050 |
CWE-264 | Low | 3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 | 12.06.2020 |
SB2020061210 SB2020062438 SB20200611184 and 3 more |
||
| #VU29007 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2020-4048 |
CWE-601 | Low | 3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 | 12.06.2020 |
SB2020061210 SB2020062438 SB20200611184 and 3 more |
||
| #VU29006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-4049 |
CWE-79 | Low | 3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 | 12.06.2020 |
SB2020061210 SB2020062438 SB20200611184 and 3 more |
||
| #VU29005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-4047 |
CWE-79 | Low | 3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 | 12.06.2020 |
SB2020061210 SB2020062438 SB20200611184 and 3 more |
||
| #VU29004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-4046 |
CWE-79 | Low | 3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 | 12.06.2020 |
SB2020061210 SB2020062438 SB20200611184 and 3 more |
||
| #VU27444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Medium | 3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 | 29.04.2020 |
SB2020042920 |
||
| #VU27443 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11026 |
CWE-79 | Low | 3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 | 29.04.2020 |
SB2020042920 SB2020050617 SB2020043039 and 1 more |
||
| #VU27442 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11029 |
CWE-79 | Medium | 3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 | 29.04.2020 |
SB2020042920 SB2020050617 SB2020043039 and 1 more |
||
| #VU27441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11030 |
CWE-79 | Low | 3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 | 29.04.2020 |
SB2020042920 SB2020050617 SB2020043039 and 1 more |
||
| #VU27440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11025 |
CWE-79 | Low | 3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 | 29.04.2020 |
SB2020042920 SB2020050617 SB2020043039 and 1 more |
||
| #VU27439 - Improper Access Control CVE-2020-11028 |
CWE-284 | Low | 3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 | 29.04.2020 |
SB2020042920 SB2020050617 SB2020043039 and 1 more |
||
| #VU27438 - Weak password recovery mechanism CVE-2020-11027 |
CWE-640 | High | 3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 | 29.04.2020 |
SB2020042920 SB2020050617 SB2020043039 and 1 more |
||
| #VU24143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-16780 |
CWE-79 | Low | 4.5.20, 4.6.17, 4.7.16, 4.8.12, 4.9.13, 5.0.8, 5.1.4, 5.2.5, 5.3.1 | 08.01.2020 |
SB2019121301 SB2020010818 SB2020050617 |
||
| #VU21788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-17672 |
CWE-79 | Low | 3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 | 15.10.2019 |
SB2019101505 SB2020010818 SB2020050617 |
||
| #VU21787 - Server-Side Request Forgery (SSRF) CVE-2019-17669 |
CWE-918 | Medium | 3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 | 15.10.2019 |
SB2019101505 SB2020010818 SB2020050617 |
||
| #VU21786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-17674 |
CWE-79 | Low | 3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 | 15.10.2019 |
SB2019101505 SB2020010818 SB2020050617 |
Showing elements 21 - 40 out of 60