Known vulnerabilities in WordPress - page 9

Software: WordPress
Software CPE: cpe:2.3:a:wordpress_org:wordpress:*:*:*:*:*:*:*:*
Total vulnerabilities: 266
Public exploits: 24
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WordPress WordPress is affected by 266 known vulnerabilities: 3 critical, 23 high, 88 medium, 152 low Critical High Medium Low

Vulnerabilities (266)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26385 - Server-Side Request Forgery (SSRF)
CVE-2019-17670
CWE-918 Low
No
No
5.2.4 25.03.2020 SB2019101505
#VU21791 - Improper input validation
CVE-2019-17675
CWE-20 Medium
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21790 - Improper input validation
CVE-2019-17673
CWE-20 Medium
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21789 - Improper Access Control
CVE-2019-17671
CWE-284 Medium
Available
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17672
CWE-79 Low
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21787 - Server-Side Request Forgery (SSRF)
CVE-2019-17669
CWE-918 Medium
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17674
CWE-79 Low
No
No
3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU20887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16222
CWE-79 Low
No
No
5.2.3 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16221
CWE-79 Low
No
No
5.2.3 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20885 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16219
CWE-79 Low
No
No
5.2.3 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16217
CWE-79 Low
No
No
5.2.3 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20883 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-16220
CWE-601 Low
No
No
5.2.3 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16218
CWE-79 Low
No
No
5.2.3 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16223
CWE-79 Low
Available
No
5.2.3 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU4856 - Improper Access Control
CVE-2017-5487
CWE-284 Low
Available
No
- 17.01.2017 SB2017011103
SB2017011503
SB2017011119
#VU4857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-5488
CWE-79 Low
No
No
- 17.01.2017 SB2017011103
SB2017011503
SB2017011118
#VU4858 - Cross-Site Request Forgery (CSRF)
CVE-2017-5489
CWE-352 Medium
No
No
- 17.01.2017 SB2017011103
SB2017011503
SB2017011117
#VU369 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-7169
CWE-22 Medium
No
No
3.7.16, 3.8.16, 3.9.14, 4.0.13, 4.1.13, 4.2.10, 4.3.6, 4.4.5, 4.5.4, 4.6.1 07.09.2016 SB2016090704
SB2016093003
SB2016090705
and 6 more
#VU368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7168
CWE-79 Low
No
No
- 07.09.2016 SB2016090704
SB2016093003
SB2016090706
and 6 more
#VU353 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-6896
CWE-352 Medium
Available
No
- 30.08.2016 SB2016081806
SB2016082001
SB2016090302
and 5 more


Showing elements 161 - 180 out of 266