WordPress Vulnerabilities

Published
Title
Published
2019-12-13
Title
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Published
2019-12-13
Title
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Published
2019-10-14
Title
WordPress <= 5.2.3 - Admin Referrer Validation
Published
2019-10-14
Title
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Published
2019-10-14
Title
WordPress <= 5.2.3 - JSON Request Cache Poisoning
Published
2019-10-14
Title
WordPress <= 5.2.3 - Stored XSS in Style Tags
Published
2019-10-14
Title
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Published
2019-10-14
Title
WordPress <= 5.2.3 - Stored XSS in Customizer
Published
2019-09-05
Title
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Published
2019-09-05
Title
WordPress 5.2.2 - Cross-Site Scripting (XSS) in Dashboard
Published
2019-09-05
Title
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Published
2019-09-05
Title
WordPress 5.2.2 - Potential Open Redirect
Published
2019-09-05
Title
WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews
Published
2019-09-05
Title
WordPress 5.2.2 - Cross-Site Scripting (XSS) in Stored Comments
Published
2019-03-13
Title
WordPress 3.9-5.1 - Comment Cross-Site Scripting (XSS)
Published
2019-02-19
Title
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Published
2018-12-13
Title
WordPress <= 5.0 - File Upload to XSS on Apache Web Servers
Published
2018-12-13
Title
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Published
2018-12-13
Title
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Published
2018-12-13
Title
WordPress <= 5.0 - Authenticated Cross-Site Scripting (XSS)
Published
2018-12-13
Title
WordPress <= 5.0 - PHP Object Injection via Meta Data
Published
2018-12-13
Title
WordPress <= 5.0 - Authenticated Post Type Bypass
Published
2018-12-13
Title
WordPress <= 5.0 - Authenticated File Delete
Published
2018-06-27
Title
WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion
Published
2018-04-03
Title
WordPress 3.7-4.9.4 - Escape Version in Generator Tag