Vulnerability Database

299,879

Total vulnerabilities in the database

Title Severity Exploit Date
WP < 6.0.3 - CSRF in wp-trackback.php
Unknown - -
WP < 6.0.3 - Stored XSS via the Customizer
Unknown - -
WP < 6.0.3 - Stored XSS via Comment Editing
Unknown - -
WP < 6.0.3 - Content from Multipart Emails Leaked
Unknown - -
WP < 6.0.3 - SQLi in WP_Date_Query
Unknown - -
WP < 6.0.3 - Stored XSS via RSS Widget
Unknown - -
WP < 6.0.3 - Data Exposure via REST Terms/Tags Endpoint
Unknown - -
WP < 6.0.3 - Multiple Stored XSS via Gutenberg
Unknown - -
WP < 6.2.1 - Thumbnail Image Update via CSRF
Unknown - -
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Unknown - -
WP < 6.2.2 - Shortcode Execution in User Generated Data
Unknown - -
WP < 6.2.1 - Contributor+ Content Injection
Unknown - -
WP 5.6-6.3.1 - Reflected XSS via Application Password Requests
Unknown - -
WP < 6.3.2 - Denial of Service via Cache Poisoning
Unknown - -
WP < 6.3.2 - Subscriber+ Arbitrary Shortcode Execution
Unknown - -
WordPress < 6.4.3 - Deserialization of Untrusted Data
Unknown - -
WordPress < 6.4.3 - Admin+ PHP File Upload
Unknown - -
WordPress < 6.5.5 - Contributor+ Stored XSS in HTML API
Unknown - -
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Unknown - -
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Unknown - -
CVE-2025-58674
Unknown - -
CVE-2025-58246
Unknown - -
CVE-2024-50555
Unknown - -
WPML Multilingual CMS < 4.6.1 - Reflected Cross-Site Scripting
Unknown - -
Elementor Page Builder < 2.7.7 - Authenticated Stored XSS
Unknown - -
Email Encoder Bundle <= 1.4.1 - Unauthenticated Cross-Site Scripting (XSS)
Unknown - -
Sticky Menu, Sticky Header (or anything!) on Scroll < 2.21 - CSRF & XSS
Unknown - -
Elementor Website Builder < 3.13.2 - Missing Authorization
Unknown - -
Premium Addons for Elementor < 4.5.2 - Subscriber+ Arbitrary Blog Option Update
Unknown - -