WordPress Vulnerabilities

Published
Title
Published
2022-10-17
Title
WP < 6.0.3 - Stored XSS via Comment Editing
Published
2022-10-17
Title
WP < 6.0.3 - Stored XSS via the Customizer
Published
2022-10-17
Title
WP < 6.0.3 - CSRF in wp-trackback.php
Published
2022-10-17
Title
WP < 6.0.3 - Reflected XSS via SQLi in Media Library
Published
2022-10-17
Title
WP < 6.0.3 - Email Address Disclosure via wp-mail.php
Published
2022-10-17
Title
WP < 6.0.3 - Open Redirect via wp_nonce_ays
Published
2022-10-17
Title
WP < 6.0.3 - Stored XSS via wp-mail.php
Published
2022-08-30
Title
WP < 6.0.2 - SQLi via Link API
Published
2022-08-30
Title
WP < 6.0.2 - Authenticated Stored Cross-Site Scripting
Published
2022-08-30
Title
WP < 6.0.2 - Reflected Cross-Site Scripting
Published
2022-03-11
Title
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Published
2022-03-11
Title
WordPress < 5.9.2 - Prototype Pollution in jQuery
Published
2022-03-11
Title
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Published
2022-01-06
Title
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Published
2022-01-06
Title
WordPress 4.1-5.8.2 - SQL Injection via WP_Meta_Query
Published
2022-01-06
Title
WordPress < 5.8.3 - Author+ Stored XSS via Post Slugs
Published
2022-01-06
Title
WordPress < 5.8.3 - SQL Injection via WP_Query
Published
2021-11-25
Title
WordPress < 5.8 - Plugin Confusion
Published
2021-11-10
Title
WordPress < 5.8.2 - Expired DST Root CA X3 Certificate
Published
2021-09-09
Title
WordPress 5.4 to 5.8 - Lodash Library Update
Published
2021-09-09
Title
WordPress 5.4 to 5.8 - Authenticated XSS in Block Editor
Published
2021-09-09
Title
WordPress 5.4 to 5.8 - Data Exposure via REST API
Published
2021-05-13
Title
WordPress 3.7 to 5.7.1 - Object Injection in PHPMailer
Published
2021-04-15
Title
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Published
2021-04-15
Title
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8