Known vulnerabilities in WordPress - page 12

Software: WordPress
Software CPE: cpe:2.3:a:wordpress_org:wordpress:*:*:*:*:*:*:*:*
Total vulnerabilities: 239
Public exploits: 23
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WordPress WordPress is affected by 239 known vulnerabilities: 2 critical, 22 high, 82 medium, 133 low Critical High Medium Low

Vulnerabilities (239)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU43515 - Permissions, Privileges, and Access Controls
CVE-2012-4421
CWE-264 Low
No
No
- 14.09.2012 SB2012072202
#VU43516 - Permissions, Privileges, and Access Controls
CVE-2012-4422
CWE-264 Low
No
No
- 14.09.2012 SB2012072202
#VU43798 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3383
CWE-79 Low
No
No
- 22.07.2012 SB2012072202
#VU43800 - Permissions, Privileges, and Access Controls
CVE-2012-3385
CWE-264 Medium
No
No
- 22.07.2012 SB2012072203
#VU43930 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4956
CWE-79 Low
No
No
- 28.06.2012 SB2012062801
#VU43931 - Improper input validation
CVE-2011-4957
CWE-20 Medium
No
No
- 28.06.2012 SB2012062801
#VU44126 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2399
CWE-79 Low
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44127 - Improper input validation
CVE-2012-2400
CWE-20 High
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44128 - Permissions, Privileges, and Access Controls
CVE-2012-2402
CWE-264 Low
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2403
CWE-79 Low
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44130 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2404
CWE-79 Low
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44666 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3818
CWE-200 Medium
No
No
- 24.09.2011 SB2011092408
#VU44813 - Improper input validation
CVE-2011-3125
CWE-20 High
No
No
- 11.08.2011 SB2011081001
#VU44814 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3126
CWE-200 Medium
No
No
- 11.08.2011 SB2011081001
#VU44815 - Improper input validation
CVE-2011-3127
CWE-20 Medium
No
No
- 11.08.2011 SB2011081001
#VU44816 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3128
CWE-200 Medium
No
No
- 11.08.2011 SB2011081001
#VU44817 - Permissions, Privileges, and Access Controls
CVE-2011-3129
CWE-264 High
No
No
- 11.08.2011 SB2011081001
#VU44818 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-3130
CWE-89 Medium
No
No
- 11.08.2011 SB2011081001
#VU44821 - Improper input validation
CVE-2011-3122
CWE-20 High
No
No
- 10.08.2011 SB2011081001


Showing elements 221 - 240 out of 239