WordPress Vulnerabilities

Published
Title
Published
2021-04-15
Title
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Published
2021-04-15
Title
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Published
2020-10-29
Title
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Published
2020-10-29
Title
WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion
Published
2020-10-29
Title
WordPress < 5.5.2 - Stored XSS in Post Slugs
Published
2020-10-29
Title
WordPress < 5.5.2 - Unauthenticated DoS Attack to RCE
Published
2020-10-29
Title
WordPress < 5.5.2 - XML-RPC Privilege Escalation
Published
2020-10-29
Title
WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables
Published
2020-10-29
Title
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Published
2020-10-29
Title
WordPress < 5.5.2 - Hardening Deserialization Requests
Published
2020-06-11
Title
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Published
2020-06-11
Title
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Published
2020-06-11
Title
WordPress < 5.4.2 - Authenticated Stored XSS via Theme Upload
Published
2020-06-11
Title
WordPress < 5.4.2 - Open Redirection
Published
2020-06-11
Title
WordPress < 5.4.2 - Authenticated XSS via Media Files
Published
2020-06-10
Title
WordPress < 5.4.2 - Authenticated XSS in Block Editor
Published
2020-04-29
Title
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Published
2020-04-29
Title
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Published
2020-04-29
Title
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Published
2020-04-29
Title
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Published
2020-04-29
Title
WordPress < 5.4.1 - Unauthenticated Users View Private Posts
Published
2020-04-29
Title
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Published
2020-01-21
Title
WordPress <= 5.2.3 - Hardening Bypass
Published
2019-12-13
Title
WordPress <= 5.3 - wp_kses_bad_protocol() Colon Bypass
Published
2019-12-13
Title
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content