Filter
Versions
2.0
69
2.0.1
64
2.0.2
61
2.0.4
61
2.0.5
60
1.5
58
1.2
56
2.0.6
56
2.1.1
56
2.1.2
56
2.2
56
1.5.1
55
1.5.1.2
54
2.0.7
54
2.2.1
54
1.5.1.3
52
2.1
51
2.1.3
51
2.0.11
50
2.2.2
50
2.0.10
49
2.3
48
1.0
47
1.2.1
47
1.2.2
47
1.5.2
47
2.0.9
47
2.2.3
47
1.0.1
46
0.71
45
1.0.2
45
2.3.1
45
2.3.2
45
2.5
45
2.0.8
43
2.5.1
43
2.6
43
2.3.3
40
2.6.1
40
2.6.3
40
2.7.1
39
2.6.5
37
2.8.1
37
2.8.2
37
2.8.5
37
2.6.2
36
2.8
36
2.8.3
36
2.8.4
36
2.9
36
2.9.1
36
2.9.2
36
3.3
36
2.7
35
2.8.6
35
3.1
35
1.5.1.1
34
3.0
34
3.0.1
34
3.3.1
33
3.1.1
32
3.1.2
32
2.8.4-a
31
2.8.5.1
31
2.8.5.2
31
2.9.1.1
31
3.0.4
31
2.0.3
29
3.0.2
29
3.0.3
29
4.7
29
3.0.5
28
3.0.6
27
1.1.1
26
1.2.3
26
1.2.4
26
1.2.5
26
1.2.5-a
26
1.3
26
1.3.2
26
1.3.3
26
3.1.3
25
3.8
25
5.0
24
3.3.2
23
4.0
22
3.9
21
0.7
20
3.3.3
20
3.4.0
20
3.1.4
19
3.2.1
19
3.7
19
3.4.1
18
3.4.2
18
3.2-beta1
17
4.2
17
4.6
17
4.8
17
3.9.1
16
4.1
16
4.9
16
5.2
16
3.5.0
15
4.3
15
4.4
15
4.5
15
5.1
15
5.4
15
3.2
14
3.5.1
14
3.8.1
13
0.711
12
1.6.2
12
2.1.3_rc1
12
2.2_revision5002
12
2.0.10_rc1
11
2.1.3_rc2
11
2.2_revision5003
11
3.6
11
3.9.2
11
0.72
10
2.0.10_rc2
10
4.7.2
10
5.3
10
0.6.2
9
0.6.2-beta_2
9
0.6.2.1
9
0.6.2.1-beta_2
9
2.2.0
9
3.7.4
9
3.8.4
9
4.5.2
9
4.7.4
9
4.8.1
9
1.5-strayhorn
8
3.8.2
8
3.8.3
8
5.7
8
1.3.1
7
3.9.0
7
4.2.3
7
5.5
7
5.6
7
5.9
7
6.0
7
0.72-rc1
6
1.0.1-miles
6
1.2-beta
6
1.4
6
1.6
6
2.3.1-rc1
6
3.6.1
6
3.7.1
6
4.7.1
6
5.8
6
0.71-gold
5
0.72-beta1
5
0.72-beta2
5
1.0-platinum
5
1.0.2-blakey
5
1.2-delta
5
1.2-mingus
5
2.1-alpha_3
5
2.3-beta3
5
2.3-rc1
5
5.3.0
5
4.8.2
4
6.1
4
6.2
4
4.1.1
3
4.2.1
3
4.2.2
3
4.3.0
3
4.4.1
3
4.4.4
3
4.5.1
3
4.5.5
3
6.3
3
1.0-rc1
2
1.0-rc2
2
1.0-rc3
2
1.0-rc4
2
3.9.3
2
4.0.1
2
4.4.2
2
4.5.3
2
4.7.3
2
4.7.5
2
5.8-beta1
2
5.9.7
2
6.0.5
2
6.1.1
2
6.1.3
2
6.2.2
2
0.70
1
0.71-beta
1
0.71-beta_3
1
0.72-beta_1
1
0.72-beta_2
1
1.0.1-rc1
1
1.2-rc1
1
2.0.5-ronan
1
2.1-ella
1
2.1.1-dangerous
1
2.7-coltrane
1
2.9.1-beta1
1
2.9.1-rc1
1
3.4
1
3.5
1
3.5.2
1
3.7.10
1
3.7.11
1
3.7.12
1
3.7.13
1
3.7.14
1
3.7.15
1
3.7.16
1
3.7.17
1
3.7.18
1
3.7.19
1
3.7.2
1
3.7.20
1
3.7.21
1
3.7.22
1
3.7.3
1
3.7.5
1
3.7.6
1
3.7.7
1
3.7.8
1
3.7.9
1
3.8.10
1
3.8.11
1
3.8.12
1
3.8.13
1
3.8.14
1
3.8.15
1
3.8.16
1
3.8.17
1
3.8.18
1
3.8.19
1
3.8.20
1
3.8.21
1
3.8.22
1
3.8.5
1
3.8.6
1
3.8.7
1
3.8.8
1
3.8.9
1
3.9.10
1
3.9.11
1
3.9.12
1
3.9.13
1
3.9.14
1
3.9.15
1
3.9.16
1
3.9.17
1
3.9.18
1
3.9.19
1
3.9.20
1
3.9.4
1
3.9.5
1
3.9.6
1
3.9.7
1
3.9.8
1
3.9.9
1
4.0.10
1
4.0.11
1
4.0.12
1
4.0.13
1
4.0.14
1
4.0.15
1
4.0.16
1
4.0.17
1
4.0.18
1
4.0.19
1
4.0.2
1
4.0.3
1
4.0.4
1
4.0.5
1
4.0.6
1
4.0.7
1
4.0.8
1
4.0.9
1
4.1.10
1
4.1.11
1
4.1.12
1
4.1.13
1
4.1.14
1
4.1.15
1
4.1.16
1
4.1.17
1
4.1.18
1
4.1.19
1
4.1.2
1
4.1.3
1
4.1.38
1
4.1.4
1
4.1.5
1
4.1.6
1
WordPress WordPressWordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function
5.4
First published (updated )
BleepingComputerEvasive Sign1 malware campaign infects 39,000 WordPress sites
First published (updated )
News
BleepingComputerBleepingComputerWordPress fixes POP chain exposing websites to RCE attacks
First published (updated )
News
BleepingComputerWordPress WordPressWordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure
5.3
First published (updated )
WordPress WordPressWordPress < 6.3.2 is vulnerable to Broken Access Control
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressAuth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block
6.5
First published (updated )
WordPress WordPressWordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and th…
5.3
First published (updated )
WordPress WordPressWP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding
5.9
First published (updated )
WordPress WordPressImproper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthent…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressA flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user …
6.5
First published (updated )
Debian Debian LinuxAuthenticated Object Injection in Multisites in WordPress
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Debian Debian LinuxWordPress Core WP_Query SQL Injection Information Disclosure Vulnerability
8
First published (updated )
WordPress WordPressWordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote…
9.8
First published (updated )
WordPress WordPressPrivate data disclosure/privilege escalation through the block editor in Wordpress
6.8
First published (updated )
WordPress WordPressWordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget
7.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
debian/wordpressAuthenticated cross-site scripting (XSS) in WordPress editor
7.6
First published (updated )
Debian Debian LinuxInformation Disclosure in wp_die() via JSONP in wordpress
5.3
First published (updated )
WordPress WordPressObject injection via local phar file
9.8
First published (updated )
debian/wordpressWordPress Authenticated disclosure of password-protected posts and pages
6.5
First published (updated )
Debian Debian LinuxWordPress Authenticated XXE attack when installation is running PHP 8
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraWordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredI…
9.8
First published (updated )
Fedoraproject FedoraWordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as demonstrated…
7.5
First published (updated )
Fedoraproject Fedorawp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges…
9.8
First published (updated )
Fedoraproject Fedorais_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines wheth…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.