WordPress 5.0.20 Vulnerabilities

Version released on 2023-10-12

Download tar
Download zip
Published
Title
Fixed in
CVSS
Published
2025-09-22
Title
WP < 6.8.3 - Author+ DOM Stored XSS
Fixed in
Fixed in 5.0.24
CVSS
5.9 (medium)
Published
2025-09-22
Title
WP < 6.8.3 - Contributor+ Sensitive Data Disclosure
Fixed in
Fixed in 5.0.24
CVSS
2.7 (low)
Published
2024-06-24
Title
WordPress < 6.5.5 - Contributor+ Stored XSS in HTML API
Fixed in
Fixed in 5.0.22
CVSS
5.9 (medium)
Published
2024-06-24
Title
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in
Fixed in 5.0.22
CVSS
5.9 (medium)
Published
2024-06-24
Title
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in
Fixed in 5.0.22
CVSS
6.8 (medium)
Published
2024-01-30
Title
WordPress < 6.4.3 - Deserialization of Untrusted Data
Fixed in
Fixed in 5.0.21
CVSS
8.5 (high)
Published
2024-01-30
Title
WordPress < 6.4.3 - Admin+ PHP File Upload
Fixed in
Fixed in 5.0.21
CVSS
6.6 (medium)