Vulnerability Database

324,829

Total vulnerabilities in the database

Vulnerabilities for products matching "wordpress"

Found 2 matching products. Filters apply to all results.

You can search for specific versions with /product/wordpress/1.2.3

WordPress / wordpress

380 vulnerabilities found
Title Severity Exploit Date Affected Version
CVE-2004-1584
Medium December 31, 2004 12/31/04
== 1.2
WordPress < 5.9.2 - Prototype Pollution in jQuery
Unknown - -
< 5.8.4
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Unknown - -
< 5.8.4
WP < 6.0.2 - Reflected Cross-Site Scripting
Unknown - -
< 5.8.5
WP < 6.0.2 - Authenticated Stored Cross-Site Scripting
Unknown - -
< 5.8.5
WP < 6.0.2 - SQLi via Link API
Unknown - -
< 5.8.5
WP < 6.0.3 - Stored XSS via wp-mail.php
Unknown - -
< 5.8.6
WP < 6.0.3 - Open Redirect via wp_nonce_ays
Unknown - -
< 5.8.6
WP < 6.0.3 - Email Address Disclosure via wp-mail.php
Unknown - -
< 5.8.6
WP < 6.0.3 - Reflected XSS via SQLi in Media Library
Unknown - -
< 5.8.6
WP < 6.0.3 - CSRF in wp-trackback.php
Unknown - -
< 5.8.6
WP < 6.0.3 - Stored XSS via the Customizer
Unknown - -
< 5.8.6
WP < 6.0.3 - Stored XSS via Comment Editing
Unknown - -
< 5.8.6
WP < 6.0.3 - Content from Multipart Emails Leaked
Unknown - -
< 5.8.6
WP < 6.0.3 - SQLi in WP_Date_Query
Unknown - -
< 5.8.6
WP < 6.0.3 - Stored XSS via RSS Widget
Unknown - -
< 5.8.6
WP < 6.0.3 - Data Exposure via REST Terms/Tags Endpoint
Unknown - -
< 5.8.6
WP < 6.0.3 - Multiple Stored XSS via Gutenberg
Unknown - -
< 5.8.6
WP < 6.2.1 - Thumbnail Image Update via CSRF
Unknown - -
< 5.8.7
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Unknown - -
< 5.8.7
WP < 6.2.2 - Shortcode Execution in User Generated Data
Unknown - -
< 5.8.7
WP < 6.2.1 - Contributor+ Content Injection
Unknown - -
< 5.8.7
WP 5.6-6.3.1 - Reflected XSS via Application Password Requests
Unknown - -
< 5.8.8
WP < 6.3.2 - Denial of Service via Cache Poisoning
Unknown - -
< 5.8.8
WP < 6.3.2 - Subscriber+ Arbitrary Shortcode Execution
Unknown - -
< 5.8.8
WordPress < 6.4.3 - Deserialization of Untrusted Data
Unknown - -
< 5.8.9
WordPress < 6.4.3 - Admin+ PHP File Upload
Unknown - -
< 5.8.9
WordPress < 6.5.5 - Contributor+ Stored XSS in HTML API
Unknown - -
< 5.8.10
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Unknown - -
< 5.8.10
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Unknown - -
< 5.8.10

Showing vulnerabilities for 2 products matching "wordpress". Each product has independent pagination.