logoWordPressPluginsThemesAPISubmitContact
search-icon
logo
search-icon
WordPressPluginsThemesAPISubmitContactSecurity Scanner
Register

WordPress Vulnerabilities

Published

Title

Published

2021-09-09

Title

WordPress 5.4 to 5.8 - Authenticated XSS in Block Editor

Published

2021-09-09

Title

WordPress 5.4 to 5.8 - Lodash Library Update

Published

2021-09-09

Title

WordPress 5.4 to 5.8 - Data Exposure via REST API

Published

2021-05-13

Title

WordPress 3.7 to 5.7.1 - Object Injection in PHPMailer

Published

2021-04-15

Title

WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure

Published

2021-04-15

Title

WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8

Published

2020-10-29

Title

WordPress < 5.5.2 - Hardening Deserialization Requests

Published

2020-10-29

Title

WordPress < 5.5.2 - Unauthenticated DoS Attack to RCE

Published

2020-10-29

Title

WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background

Published

2020-10-29

Title

WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion

Published

2020-10-29

Title

WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network

Published

2020-10-29

Title

WordPress < 5.5.2 - XML-RPC Privilege Escalation

Published

2020-10-29

Title

WordPress < 5.5.2 - Stored XSS in Post Slugs

Published

2020-10-29

Title

WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables

Published

2020-06-11

Title

WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments

Published

2020-06-11

Title

WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation

Published

2020-06-11

Title

WordPress < 5.4.2 - Authenticated Stored XSS via Theme Upload

Published

2020-06-11

Title

WordPress < 5.4.2 - Authenticated XSS via Media Files

Published

2020-06-11

Title

WordPress < 5.4.2 - Open Redirection

Published

2020-06-10

Title

WordPress < 5.4.2 - Authenticated XSS in Block Editor

Published

2020-04-29

Title

WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer

Published

2020-04-29

Title

WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads

Published

2020-04-29

Title

WordPress < 5.4.1 - Unauthenticated Users View Private Posts

Published

2020-04-29

Title

WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block

Published

2020-04-29

Title

WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated