Known vulnerabilities in WordPress - page 13

Software: WordPress
Software CPE: cpe:2.3:a:wordpress_org:wordpress:*:*:*:*:*:*:*:*
Total vulnerabilities: 251
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WordPress WordPress is affected by 251 known vulnerabilities: 3 critical, 22 high, 87 medium, 139 low Critical High Medium Low

Vulnerabilities (251)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU44128 - Permissions, Privileges, and Access Controls
CVE-2012-2402
CWE-264 Low
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2403
CWE-79 Low
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44130 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2404
CWE-79 Low
No
No
- 22.04.2012 SB2012042202
SB2012121202
#VU44666 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3818
CWE-200 Medium
No
No
- 24.09.2011 SB2011092408
#VU44813 - Improper input validation
CVE-2011-3125
CWE-20 High
No
No
- 11.08.2011 SB2011081001
#VU44814 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3126
CWE-200 Medium
No
No
- 11.08.2011 SB2011081001
#VU44815 - Improper input validation
CVE-2011-3127
CWE-20 Medium
No
No
- 11.08.2011 SB2011081001
#VU44816 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3128
CWE-200 Medium
No
No
- 11.08.2011 SB2011081001
#VU44817 - Permissions, Privileges, and Access Controls
CVE-2011-3129
CWE-264 High
No
No
- 11.08.2011 SB2011081001
#VU44818 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-3130
CWE-89 Medium
No
No
- 11.08.2011 SB2011081001
#VU44821 - Improper input validation
CVE-2011-3122
CWE-20 High
No
No
- 10.08.2011 SB2011081001


Showing elements 241 - 260 out of 251