| CVE-2026-119977 |
Exploitée
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
|
8.1
Élevée
|
31 oct. 2026 |
| CVE-2026-114570 |
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2…
|
4.9
Moyenne
|
22 oct. 2026 |
| CVE-2026-3906 |
WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1
|
4.3
Moyenne
|
11 mars 2026 |
| CVE-2022-4973 |
WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be…
|
4.9
Moyenne
|
16 oct. 2024 |
| CVE-2024-6307 |
WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to…
|
6.4
Moyenne
|
25 juin 2024 |
| CVE-2024-4439 |
WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various…
|
7.2
Élevée
|
3 mai 2024 |
| CVE-2023-5692 |
WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the…
|
5.3
Moyenne
|
5 avr. 2024 |
| CVE-2023-2745 |
WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter
|
5.4
Moyenne
|
17 mai 2023 |