Known vulnerabilities in WordPress - page 12

Software: WordPress
Software CPE: cpe:2.3:a:wordpress_org:wordpress:*:*:*:*:*:*:*:*
Total vulnerabilities: 266
Public exploits: 24
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WordPress WordPress is affected by 266 known vulnerabilities: 3 critical, 23 high, 88 medium, 152 low Critical High Medium Low

Vulnerabilities (266)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16529 - Exposure of sensitive information to an unauthorized actor
CVE-2018-20151
CWE-200 Low
No
No
5.0.1 13.12.2018 SB2018121308
SB2019030103
#VU16528 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20149
CWE-79 Low
No
No
5.0.1 13.12.2018 SB2018121308
SB2019030103
#VU16527 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20150
CWE-79 Low
No
No
5.0.1 13.12.2018 SB2018121308
SB2019030103
#VU16526 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20153
CWE-79 Low
No
No
5.0.1 13.12.2018 SB2018121308
SB2019030103
#VU16525 - Improper input validation
CVE-2018-20148
CWE-20 High
Available
No
5.0.1 13.12.2018 SB2018121308
SB2019030103
#VU15401 - Resource Management Errors
CVE-2018-14028
CWE-399 Medium
No
No
- 18.10.2018 SB2018081701
#VU14439 - Deserialization of Untrusted Data
CVE-2018-1000773
CWE-502 Medium
No
No
- 17.08.2018 SB2018081701
#VU8938 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 26.10.2017 SB2017091907
#VU8937 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
- 26.10.2017 SB2017091907
#VU8936 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
- 26.10.2017 SB2017091907
#VU8935 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 26.10.2017 SB2017091907
#VU8934 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 26.10.2017 SB2017091907
#VU8933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 26.10.2017 SB2017091907
#VU8932 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 26.10.2017 SB2017091907
#VU8931 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 26.10.2017 SB2017091907
#VU8813 - Permissions, Privileges, and Access Controls
CVE-2017-14990
CWE-264 Low
No
No
4.8.3 11.10.2017 SB2017101113
SB2017101208
SB2024072239
#VU8511 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14718
CWE-79 Low
No
No
- 20.09.2017 SB2017092002
SB2017101208
#VU8510 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14720
CWE-79 Low
No
No
- 20.09.2017 SB2017092002
SB2017101208
#VU8509 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14721
CWE-79 Low
No
No
- 20.09.2017 SB2017092002
SB2017101208
#VU8505 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-14723
CWE-89 Medium
No
No
- 20.09.2017 SB2017092002
SB2017101208


Showing elements 221 - 240 out of 266