WordPress Vulnerabilities

Published
Title
Published
2023-10-12
Title
WP < 6.3.2 - Contributor+ Comment Disclosure
Published
2023-10-12
Title
WP < 6.3.2 - Subscriber+ Arbitrary Shortcode Execution
Published
2023-10-12
Title
WP < 6.3.2 - Denial of Service via Cache Poisoning
Published
2023-10-12
Title
WP 5.6-6.3.1 - Reflected XSS via Application Password Requests
Published
2023-10-12
Title
WP 5.6-6.3.1 - Contributor+ Stored XSS via Navigation Block
Published
2023-10-12
Title
WP 6.3-6.3.1 - Contributor+ Stored XSS via Footnotes Block
Published
2023-05-16
Title
WP < 6.2.1 - Contributor+ Content Injection
Published
2023-05-16
Title
WP < 6.2.2 - Shortcode Execution in User Generated Data
Published
2023-05-16
Title
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Published
2023-05-16
Title
WP < 6.2.1 - Thumbnail Image Update via CSRF
Published
2023-05-16
Title
WP < 6.2.1 - Directory Traversal via Translation Files
Published
2022-12-13
Title
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Published
2022-10-17
Title
WP < 6.0.3 - Multiple Stored XSS via Gutenberg
Published
2022-10-17
Title
WP < 6.0.3 - Data Exposure via REST Terms/Tags Endpoint
Published
2022-10-17
Title
WP < 6.0.3 - Stored XSS via RSS Widget
Published
2022-10-17
Title
WP < 6.0.3 - SQLi in WP_Date_Query
Published
2022-10-17
Title
WP < 6.0.3 - Content from Multipart Emails Leaked
Published
2022-10-17
Title
WP < 6.0.3 - Stored XSS via Comment Editing
Published
2022-10-17
Title
WP < 6.0.3 - Stored XSS via the Customizer
Published
2022-10-17
Title
WP < 6.0.3 - CSRF in wp-trackback.php
Published
2022-10-17
Title
WP < 6.0.3 - Reflected XSS via SQLi in Media Library
Published
2022-10-17
Title
WP < 6.0.3 - Email Address Disclosure via wp-mail.php
Published
2022-10-17
Title
WP < 6.0.3 - Open Redirect via wp_nonce_ays
Published
2022-10-17
Title
WP < 6.0.3 - Stored XSS via wp-mail.php
Published
2022-08-30
Title
WP < 6.0.2 - SQLi via Link API