Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: wordpress Clear
ID Title
CVE-2022-50970 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50970)
cross-site scripting in wordpress (CVE-2022-50970). Risk of unauthorized operations or information disclosure.
CVE-2022-50955 Cross-Site Request Forgery (CSRF) in wordpress (CVE-2022-50955)
vulnerability in wordpress (CVE-2022-50955). Risk of unauthorized operations or information disclosure.
CVE-2022-50956 Path Traversal in wordpress (CVE-2022-50956)
path traversal in wordpress (CVE-2022-50956). Confidential information can be exposed externally.
CVE-2022-50958 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50958)
cross-site scripting in wordpress (CVE-2022-50958). Risk of unauthorized operations or information disclosure.
CVE-2022-50959 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50959)
cross-site scripting in wordpress (CVE-2022-50959). Risk of unauthorized operations or information disclosure.
CVE-2022-50960 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50960)
cross-site scripting in wordpress (CVE-2022-50960). Risk of unauthorized operations or information disclosure.
CVE-2022-50961 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50961)
cross-site scripting in wordpress (CVE-2022-50961). Risk of unauthorized operations or information disclosure.
CVE-2022-50945 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50945)
cross-site scripting in wordpress (CVE-2022-50945). Risk of unauthorized operations or information disclosure.
CVE-2022-50946 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50946)
cross-site scripting in wordpress (CVE-2022-50946). Risk of unauthorized operations or information disclosure.
CVE-2022-50947 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50947)
cross-site scripting in wordpress (CVE-2022-50947). Risk of unauthorized operations or information disclosure.
CVE-2022-50949 Cross-Site Scripting (XSS) in wordpress (CVE-2022-50949)
cross-site scripting in wordpress (CVE-2022-50949). Risk of unauthorized operations or information disclosure.
CVE-2022-50954 Vulnerability in wordpress (CVE-2022-50954)
vulnerability in wordpress (CVE-2022-50954). Confidential information can be exposed externally.
CVE-2021-47948 Vulnerability in wordpress (CVE-2021-47948)
vulnerability in wordpress (CVE-2021-47948). Risk of unauthorized operations or information disclosure.
CVE-2021-47951 Cross-Site Scripting (XSS) in wordpress (CVE-2021-47951)
cross-site scripting in wordpress (CVE-2021-47951). Risk of unauthorized operations or information disclosure.
CVE-2021-47940 Vulnerability in wordpress (CVE-2021-47940)
vulnerability in wordpress (CVE-2021-47940). Successful exploitation can lead to full system takeover.
CVE-2021-47941 SQL Injection in wordpress (CVE-2021-47941)
SQL injection in wordpress (CVE-2021-47941). Confidential information can be exposed externally.
CVE-2021-47932 Vulnerability in wordpress (CVE-2021-47932)
vulnerability in wordpress (CVE-2021-47932). Successful exploitation can lead to full system takeover.
CVE-2021-47933 Vulnerability in wordpress (CVE-2021-47933)
vulnerability in wordpress (CVE-2021-47933). Successful exploitation can lead to full system takeover.
CVE-2021-47927 Cross-Site Scripting (XSS) in wordpress (CVE-2021-47927)
cross-site scripting in wordpress (CVE-2021-47927). Risk of unauthorized operations or information disclosure.
CVE-2026-8198 Information Disclosure in wordpress (CVE-2026-8198)
vulnerability in wordpress (CVE-2026-8198). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`.
CVE-2026-7652 Vulnerability in wordpress (CVE-2026-7652)
vulnerability in wordpress (CVE-2026-7652). Risk of unauthorized operations or information disclosure.
CVE-2026-7475 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7475)
cross-site scripting in wordpress (CVE-2026-7475). Risk of unauthorized operations or information disclosure. Exploitable via ``sky_script_content``.
CVE-2026-7650 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7650)
cross-site scripting in wordpress (CVE-2026-7650). Risk of unauthorized operations or information disclosure.
CVE-2026-5341 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5341)
cross-site scripting in wordpress (CVE-2026-5341). Risk of unauthorized operations or information disclosure. Exploitable via ``strava_nmr_connect``.
CVE-2026-7330 Cross-Site Scripting (XSS) in wordpress (CVE-2026-7330)
cross-site scripting in wordpress (CVE-2026-7330). Risk of unauthorized operations or information disclosure.
CVE-2026-5127 Unsafe Deserialization in wordpress (CVE-2026-5127)
vulnerability in wordpress (CVE-2026-5127). Successful exploitation can lead to full system takeover.
CVE-2026-4935 SQL Injection in wordpress (CVE-2026-4935)
SQL injection in wordpress (CVE-2026-4935). Confidential information can be exposed externally.
CVE-2026-5753 Vulnerability in wordpress (CVE-2026-5753)
vulnerability in wordpress (CVE-2026-5753). Confidential information can be exposed externally.
CVE-2026-3208 Vulnerability in wordpress (CVE-2026-3208)
vulnerability in wordpress (CVE-2026-3208). Risk of unauthorized operations or information disclosure.
CVE-2026-25863 Vulnerability in wordpress (CVE-2026-25863)
vulnerability in wordpress (CVE-2026-25863). Risk of unauthorized operations or information disclosure.
CVE-2026-41471 Vulnerability in wordpress (CVE-2026-41471)
vulnerability in wordpress (CVE-2026-41471). Confidential information can be exposed externally.
CVE-2026-32834 Vulnerability in wordpress (CVE-2026-32834)
vulnerability in wordpress (CVE-2026-32834). Confidential information can be exposed externally.
CVE-2026-6229 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-6229)
SSRF in wordpress (CVE-2026-6229). Risk of unauthorized operations or information disclosure.
CVE-2026-41940 KEV [KEV] Vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940)
vulnerability in Webpros cpanel-whm-and-wp2-wordpress-squared (CVE-2026-41940). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2026-5428 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5428)
cross-site scripting in wordpress (CVE-2026-5428). Risk of unauthorized operations or information disclosure.
CVE-2026-5488 Vulnerability in wordpress (CVE-2026-5488)
vulnerability in wordpress (CVE-2026-5488). Risk of unauthorized operations or information disclosure.
CVE-2026-6235 Vulnerability in wordpress (CVE-2026-6235)
vulnerability in wordpress (CVE-2026-6235). Successful exploitation can lead to full system takeover.
CVE-2024-7083 Cross-Site Scripting (XSS) in wordpress (CVE-2024-7083)
cross-site scripting in wordpress (CVE-2024-7083). Risk of unauthorized operations or information disclosure.
CVE-2026-5718 Unrestricted File Upload in wordpress (CVE-2026-5718)
vulnerability in wordpress (CVE-2026-5718). Successful exploitation can lead to full system takeover.
CVE-2026-3885 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3885)
cross-site scripting in wordpress (CVE-2026-3885). Risk of unauthorized operations or information disclosure.
CVE-2025-15565 Vulnerability in wordpress (CVE-2025-15565)
vulnerability in wordpress (CVE-2025-15565). Risk of unauthorized operations or information disclosure.
CVE-2026-4429 Cross-Site Scripting (XSS) in wordpress (CVE-2026-4429)
cross-site scripting in wordpress (CVE-2026-4429). Risk of unauthorized operations or information disclosure.
CVE-2026-5357 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5357)
cross-site scripting in wordpress (CVE-2026-5357). Risk of unauthorized operations or information disclosure.
CVE-2026-4124 Vulnerability in wordpress (CVE-2026-4124)
vulnerability in wordpress (CVE-2026-4124). Risk of unauthorized operations or information disclosure.
CVE-2026-3574 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3574)
cross-site scripting in wordpress (CVE-2026-3574). Risk of unauthorized operations or information disclosure.
CVE-2026-3568 Vulnerability in wordpress (CVE-2026-3568)
vulnerability in wordpress (CVE-2026-3568). Risk of unauthorized operations or information disclosure.
CVE-2026-4326 The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...
The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate_required_plugins() function. Specifically, the current_user_can('install_plugins') capability check...
CVE-2026-5711 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5711)
cross-site scripting in wordpress (CVE-2026-5711). Risk of unauthorized operations or information disclosure.
CVE-2026-5436 Path Traversal in wordpress (CVE-2026-5436)
path traversal in wordpress (CVE-2026-5436). Successful exploitation can lead to full system takeover.
CVE-2026-5451 Cross-Site Scripting (XSS) in wordpress (CVE-2026-5451)
cross-site scripting in wordpress (CVE-2026-5451). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →