| CVE-2026-119977 |
Exploited
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
|
8.1
High
|
Oct 31, 2026 |
| CVE-2026-114570 |
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2…
|
4.9
Medium
|
Oct 22, 2026 |
| CVE-2026-3906 |
WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1
|
4.3
Medium
|
Mar 11, 2026 |
| CVE-2022-4973 |
WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be…
|
4.9
Medium
|
Oct 16, 2024 |
| CVE-2024-6307 |
WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to…
|
6.4
Medium
|
Jun 25, 2024 |
| CVE-2024-4439 |
WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various…
|
7.2
High
|
May 3, 2024 |
| CVE-2023-5692 |
WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the…
|
5.3
Medium
|
Apr 5, 2024 |
| CVE-2023-2745 |
WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter
|
5.4
Medium
|
May 17, 2023 |