Known vulnerabilities in WordPress 3.9.2 - page 2

Software: WordPress
Version: 3.9.2
Software CPE: cpe:2.3:a:wordpress_org:wordpress:*:*:*:*:*:*:*:*
Total vulnerabilities: 69
Public exploits: 6
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting WordPress version 3.9.2 WordPress 3.9.2 is affected by 69 vulnerabilities: 7 high, 21 medium, 41 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141188 - Cryptographic Issues
CVE-2014-9037
CWE-310 Medium
No
No
3.7.5, 3.8.5, 3.9.3, 4.0.1 07.08.2026 SB2014112606
#VU141187 - Security Features
CVE-2014-9039
CWE-254 High
No
No
3.7.5, 3.8.5, 3.9.3, 4.0.1 07.08.2026 SB2014112606
#VU59290 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-21661
CWE-89 High
Public exploit available
No
3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3 07.01.2022 SB2022010706
SB2022011113
SB2022010719
and 2 more
#VU59289 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21663
CWE-94 Low
No
No
3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3 07.01.2022 SB2022010706
SB2022011113
SB2022010719
and 2 more
#VU48036 - Permissions, Privileges, and Access Controls
CVE-2020-28035
CWE-264 Medium
No
No
3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2 30.10.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU29009 - Improper Access Control
CWE-284 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
#VU29008 - Permissions, Privileges, and Access Controls
CVE-2020-4050
CWE-264 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29007 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-4048
CWE-601 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4049
CWE-79 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4047
CWE-79 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4046
CWE-79 Low
No
No
3.7.34, 3.8.34, 3.9.32, 4.0.31, 4.1.31, 4.2.28, 4.3.24, 4.4.23, 4.5.22, 4.6.19, 4.7.18, 4.8.14, 4.9.15, 5.0.10, 5.1.6, 5.2.7, 5.3.4, 5.4.2 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU27439 - Improper Access Control
CVE-2020-11028
CWE-284 Low
No
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27438 - Weak password recovery mechanism
CVE-2020-11027
CWE-640 High
Public exploit available
No
3.7.33, 3.8.33, 3.9.31, 4.0.30, 4.1.30, 4.2.27, 4.3.23, 4.4.22, 4.5.21, 4.6.18, 4.7.17, 4.8.13, 4.9.14, 5.0.9, 5.1.5, 5.2.6, 5.3.3, 5.4.1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU41056 - Improper input validation
CVE-2014-9038
CWE-20 Medium
No
No
- 26.11.2014 SB2014112606
#VU41057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9036
CWE-79 Low
No
No
3.7.5, 3.8.5, 3.9.3, 4.0.1 26.11.2014 SB2014112606
#VU41058 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9035
CWE-79 Low
No
No
3.7.5, 3.8.5, 3.9.3, 4.0.1 26.11.2014 SB2014112606
#VU41059 - Data Handling
CVE-2014-9034
CWE-19 Medium
Public exploit available
No
- 26.11.2014 SB2014112606
#VU41060 - Cross-Site Request Forgery (CSRF)
CVE-2014-9033
CWE-352 Medium
No
No
- 26.11.2014 SB2014112606
#VU41061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9032
CWE-79 Low
No
No
- 26.11.2014 SB2014112606
#VU41062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9031
CWE-79 Low
No
No
3.7.5, 3.8.5, 3.9.3 26.11.2014 SB2014112607


Showing elements 21 - 40 out of 69