Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2022-3907 |
|
Vulnerability in wordpress (CVE-2022-3907)
vulnerability in wordpress (CVE-2022-3907). Confidential information can be exposed externally.
|
| CVE-2022-2356 |
|
Unrestricted File Upload in wordpress (CVE-2022-2356)
vulnerability in wordpress (CVE-2022-2356). Successful exploitation can lead to full system takeover.
|
| CVE-2019-10869 |
|
Path Traversal in wordpress (CVE-2019-10869)
path traversal in wordpress (CVE-2019-10869). Successful exploitation can lead to full system takeover.
|
| CVE-2021-24713 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2021-24713)
cross-site scripting in wordpress (CVE-2021-24713). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-25213 KEV |
|
[KEV] Unrestricted File Upload in Wordpress file-manager-plugin (CVE-2020-25213)
vulnerability in Wordpress file-manager-plugin (CVE-2020-25213). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-11738 KEV |
|
[KEV] Path Traversal in Wordpress snap-creek-duplicator-plugin (CVE-2020-11738)
path traversal in Wordpress snap-creek-duplicator-plugin (CVE-2020-11738). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2019-9978 KEV |
|
[KEV] Cross-Site Scripting (XSS) in Wordpress social-warfare-plugin (CVE-2019-9978)
cross-site scripting in Wordpress social-warfare-plugin (CVE-2019-9978). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-28707 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2020-28707)
cross-site scripting in wordpress (CVE-2020-28707). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-3302 |
|
Vulnerability in wordpress (CVE-2015-3302)
vulnerability in wordpress (CVE-2015-3302). Confidential information can be exposed externally.
|
| CVE-2015-7666 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7666)
cross-site scripting in wordpress (CVE-2015-7666). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7667 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7667)
cross-site scripting in wordpress (CVE-2015-7667). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7668 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-7668)
cross-site scripting in wordpress (CVE-2015-7668). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-7669 |
|
Path Traversal in wordpress (CVE-2015-7669)
path traversal in wordpress (CVE-2015-7669). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17869 |
|
The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.
The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.
|
| CVE-2011-4955 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2011-4955)
cross-site scripting in wordpress (CVE-2011-4955). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17780 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17780)
cross-site scripting in wordpress (CVE-2017-17780). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17719 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17719)
cross-site scripting in wordpress (CVE-2017-17719). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17744 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17744)
cross-site scripting in wordpress (CVE-2017-17744). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17753 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17753)
cross-site scripting in wordpress (CVE-2017-17753). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16949 |
|
Unrestricted File Upload in wordpress (CVE-2017-16949)
vulnerability in wordpress (CVE-2017-16949). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17451 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17451)
cross-site scripting in wordpress (CVE-2017-17451). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17096 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17096)
cross-site scripting in wordpress (CVE-2017-17096). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17091 |
|
Vulnerability in wordpress (CVE-2017-17091)
vulnerability in wordpress (CVE-2017-17091). Successful exploitation can lead to full system takeover.
|
| CVE-2017-17092 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17092)
cross-site scripting in wordpress (CVE-2017-17092). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17093 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17093)
cross-site scripting in wordpress (CVE-2017-17093). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17094 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17094)
cross-site scripting in wordpress (CVE-2017-17094). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17059 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17059)
cross-site scripting in wordpress (CVE-2017-17059). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-17058 |
|
Path Traversal in wordpress (CVE-2017-17058)
path traversal in wordpress (CVE-2017-17058). Confidential information can be exposed externally.
|
| CVE-2017-17043 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-17043)
cross-site scripting in wordpress (CVE-2017-17043). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16955 |
|
SQL Injection in wordpress (CVE-2017-16955)
SQL injection in wordpress (CVE-2017-16955). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000227 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-1000227)
cross-site scripting in wordpress (CVE-2017-1000227). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16870 |
|
SSRF (Server-Side Request Forgery) in wordpress (CVE-2017-16870)
SSRF in wordpress (CVE-2017-16870). Successful exploitation can lead to full system takeover.
|
| CVE-2017-16871 |
|
Code Injection in wordpress (CVE-2017-16871)
code injection in wordpress (CVE-2017-16871). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000224 |
|
Cross-Site Request Forgery (CSRF) in wordpress (CVE-2017-1000224)
vulnerability in wordpress (CVE-2017-1000224). Data can be tampered with by attackers.
|
| CVE-2017-16842 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-16842)
cross-site scripting in wordpress (CVE-2017-16842). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16815 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-16815)
cross-site scripting in wordpress (CVE-2017-16815). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16562 |
|
Authentication Bypass in wordpress (CVE-2017-16562)
authentication bypass in wordpress (CVE-2017-16562). Successful exploitation can lead to full system takeover.
|
| CVE-2017-16758 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-16758)
cross-site scripting in wordpress (CVE-2017-16758). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-16510 |
|
SQL Injection in wordpress (CVE-2017-16510)
SQL injection in wordpress (CVE-2017-16510). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15919 |
|
SQL Injection in wordpress (CVE-2017-15919)
SQL injection in wordpress (CVE-2017-15919). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15867 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-15867)
cross-site scripting in wordpress (CVE-2017-15867). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15863 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-15863)
cross-site scripting in wordpress (CVE-2017-15863). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-5532 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2015-5532)
cross-site scripting in wordpress (CVE-2015-5532). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-5533 |
|
SQL Injection in wordpress (CVE-2015-5533)
SQL injection in wordpress (CVE-2015-5533). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15810 |
|
Cross-Site Scripting (XSS) in csharp (CVE-2017-15810)
cross-site scripting in csharp (CVE-2017-15810). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15811 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-15811)
cross-site scripting in wordpress (CVE-2017-15811). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15812 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2017-15812)
cross-site scripting in wordpress (CVE-2017-15812). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-6668 |
|
Information Disclosure in wordpress (CVE-2015-6668)
vulnerability in wordpress (CVE-2015-6668). Confidential information can be exposed externally.
|
| CVE-2012-6707 |
|
Vulnerability in wordpress (CVE-2012-6707)
vulnerability in wordpress (CVE-2012-6707). Confidential information can be exposed externally.
|
| CVE-2015-5227 |
|
Vulnerability in wordpress (CVE-2015-5227)
vulnerability in wordpress (CVE-2015-5227). Successful exploitation can lead to full system takeover.
|