Total vulnerabilities in the database
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.
CVSS v3:
CVSS v2:
CWEs:
OWASP TOP 10: