Vulnerability Database

300,445

Total vulnerabilities in the database

Title Severity Exploit Date
CVE-1999-0082
High November 11, 1988 11/11/88
CVE-1999-0095
High October 1, 1988 10/1/88
WP Amour < 1.5.7 - Authenticated Stored Cross-Site Scripting (XSS)
Unknown - -
WP Super Cache < 1.4.3 - Stored Cross-Site Scripting (XSS)
Unknown - -
WP Super Cache < 1.4.9 - Cross-Site Scripting (XSS)
Unknown - -
WP Super Cache < 1.4.5 - PHP Object Injection
Unknown - -
WP Super Cache < 1.9 - Unauthenticated Cache Poisoning
Unknown - -
WordPress < 5.9.2 - Prototype Pollution in jQuery
Unknown - -
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Unknown - -
WP < 6.0.2 - Reflected Cross-Site Scripting
Unknown - -
WP < 6.0.2 - Authenticated Stored Cross-Site Scripting
Unknown - -
WP < 6.0.2 - SQLi via Link API
Unknown - -
WP < 6.0.3 - Stored XSS via wp-mail.php
Unknown - -
WP < 6.0.3 - Open Redirect via wp_nonce_ays
Unknown - -
WP < 6.0.3 - Email Address Disclosure via wp-mail.php
Unknown - -
WP < 6.0.3 - Reflected XSS via SQLi in Media Library
Unknown - -
WP < 6.0.3 - CSRF in wp-trackback.php
Unknown - -
WP < 6.0.3 - Stored XSS via the Customizer
Unknown - -
WP < 6.0.3 - Stored XSS via Comment Editing
Unknown - -
WP < 6.0.3 - Content from Multipart Emails Leaked
Unknown - -
WP < 6.0.3 - SQLi in WP_Date_Query
Unknown - -
WP < 6.0.3 - Stored XSS via RSS Widget
Unknown - -
WP < 6.0.3 - Data Exposure via REST Terms/Tags Endpoint
Unknown - -
WP < 6.0.3 - Multiple Stored XSS via Gutenberg
Unknown - -
WP < 6.2.1 - Thumbnail Image Update via CSRF
Unknown - -
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Unknown - -
WP < 6.2.2 - Shortcode Execution in User Generated Data
Unknown - -
WP < 6.2.1 - Contributor+ Content Injection
Unknown - -
WP 5.6-6.3.1 - Reflected XSS via Application Password Requests
Unknown - -
WP < 6.3.2 - Denial of Service via Cache Poisoning
Unknown - -
WP < 6.3.2 - Subscriber+ Arbitrary Shortcode Execution
Unknown - -
WordPress < 6.4.3 - Deserialization of Untrusted Data
Unknown - -
WordPress < 6.4.3 - Admin+ PHP File Upload
Unknown - -
WordPress < 6.5.5 - Contributor+ Stored XSS in HTML API
Unknown - -
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Unknown - -
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Unknown - -
CVE-2025-58674
Unknown - -
CVE-2025-58246
Unknown - -
CVE-2024-50555
Unknown - -
WPML Multilingual CMS < 4.6.1 - Reflected Cross-Site Scripting
Unknown - -
Elementor Page Builder < 2.7.7 - Authenticated Stored XSS
Unknown - -
Email Encoder Bundle <= 1.4.1 - Unauthenticated Cross-Site Scripting (XSS)
Unknown - -
Sticky Menu, Sticky Header (or anything!) on Scroll < 2.21 - CSRF & XSS
Unknown - -
Elementor Website Builder < 3.13.2 - Missing Authorization
Unknown - -
Premium Addons for Elementor < 4.5.2 - Subscriber+ Arbitrary Blog Option Update
Unknown - -