WordPress Vulnerability Database (CVE)
A list of WordPress core versions and their known, publicly documented security vulnerabilities (CVE). Data comes from WPScan and refreshes automatically every 30 minutes for versions actively monitored by MonitorWWW.com — the more sites we monitor, the broader the database gets.
385 versions checked
358 with known vulnerabilities
WP 7.1 ✓ No known vulnerabilities
WP 7.0.4 ✓ No known vulnerabilities
WP 7.0.3 ⛔ 1 known vulnerabilities
WP 7.0.2 ⛔ 13 known vulnerabilities
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 7.0.3
Vulnerability
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 7.0.3
WP 7.0.1 ⛔ 15 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 7.0.2
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 7.0.3
Vulnerability
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 7.0.3
WP 7.0 ⛔ 15 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 7.0.2
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 7.0.3
Vulnerability
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 7.0.3
WP 6.9.7 ✓ No known vulnerabilities
WP 6.9.6 ⛔ 1 known vulnerabilities
WP 6.9.5 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
WP 6.9.4 ⛔ 14 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
WP 6.9.3 ⛔ 14 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
WP 6.9.2 ⛔ 14 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
WP 6.9.1 ⛔ 14 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
WP 6.9 ⛔ 14 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
WP 6.8.8 ✓ No known vulnerabilities
WP 6.8.7 ⛔ 1 known vulnerabilities
WP 6.8.6 ⛔ 8 known vulnerabilities
WP 6.8.5 ⛔ 9 known vulnerabilities
WP 6.8.4 ⛔ 9 known vulnerabilities
WP 6.8.3 ⛔ 9 known vulnerabilities
WP 6.8.2 ⛔ 11 known vulnerabilities
WP 6.8.1 ⛔ 11 known vulnerabilities
WP 6.8 ⛔ 11 known vulnerabilities
WP 6.7.7 ✓ No known vulnerabilities
WP 6.7.6 ⛔ 1 known vulnerabilities
WP 6.7.5 ⛔ 8 known vulnerabilities
WP 6.7.4 ⛔ 8 known vulnerabilities
WP 6.7.3 ⛔ 10 known vulnerabilities
WP 6.7.2 ⛔ 10 known vulnerabilities
WP 6.7.1 ⛔ 10 known vulnerabilities
WP 6.7 ⛔ 10 known vulnerabilities
WP 6.6.7 ✓ No known vulnerabilities
WP 6.6.6 ⛔ 1 known vulnerabilities
WP 6.6.5 ⛔ 8 known vulnerabilities
WP 6.6.4 ⛔ 8 known vulnerabilities
WP 6.6.3 ⛔ 10 known vulnerabilities
WP 6.6.2 ⛔ 10 known vulnerabilities
WP 6.6.1 ⛔ 10 known vulnerabilities
WP 6.6 ⛔ 10 known vulnerabilities
WP 6.5.10 ✓ No known vulnerabilities
WP 6.5.9 ⛔ 1 known vulnerabilities
WP 6.5.8 ⛔ 8 known vulnerabilities
WP 6.5.7 ⛔ 8 known vulnerabilities
WP 6.5.6 ⛔ 10 known vulnerabilities
WP 6.5.5 ⛔ 10 known vulnerabilities
WP 6.5.4 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
WP 6.5.3 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
WP 6.5.2 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
WP 6.5 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
WP 6.4.10 ✓ No known vulnerabilities
WP 6.4.9 ⛔ 1 known vulnerabilities
WP 6.4.8 ⛔ 8 known vulnerabilities
WP 6.4.7 ⛔ 8 known vulnerabilities
WP 6.4.6 ⛔ 10 known vulnerabilities
WP 6.4.5 ⛔ 10 known vulnerabilities
WP 6.4.4 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
WP 6.4.3 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
WP 6.4.2 ⛔ 16 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
WP 6.4.1 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
WP 6.4 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
WP 6.3.10 ✓ No known vulnerabilities
WP 6.3.9 ⛔ 1 known vulnerabilities
WP 6.3.8 ⛔ 8 known vulnerabilities
WP 6.3.7 ⛔ 8 known vulnerabilities
WP 6.3.6 ⛔ 10 known vulnerabilities
WP 6.3.5 ⛔ 10 known vulnerabilities
WP 6.3.4 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
WP 6.3.3 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
WP 6.3.2 ⛔ 16 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
WP 6.3.1 ⛔ 23 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
WP 6.3 ⛔ 23 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
WP 6.2.11 ✓ No known vulnerabilities
WP 6.2.10 ⛔ 1 known vulnerabilities
WP 6.2.9 ⛔ 8 known vulnerabilities
WP 6.2.8 ⛔ 8 known vulnerabilities
WP 6.2.7 ⛔ 10 known vulnerabilities
WP 6.2.6 ⛔ 10 known vulnerabilities
WP 6.2.5 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
WP 6.2.4 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
WP 6.2.3 ⛔ 16 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
WP 6.2.2 ⛔ 22 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
WP 6.2.1 ⛔ 23 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
WP 6.2 ⛔ 28 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
WP 6.1.12 ✓ No known vulnerabilities
WP 6.1.11 ✓ No known vulnerabilities
WP 6.1.10 ⛔ 8 known vulnerabilities
WP 6.1.9 ⛔ 8 known vulnerabilities
WP 6.1.8 ⛔ 10 known vulnerabilities
WP 6.1.7 ⛔ 10 known vulnerabilities
WP 6.1.6 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
WP 6.1.5 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
WP 6.1.4 ⛔ 16 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
WP 6.1.3 ⛔ 22 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
WP 6.1.2 ⛔ 22 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
WP 6.1.1 ⛔ 28 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
WP 6.1 ⛔ 28 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
WP 6.0.14 ✓ No known vulnerabilities
WP 6.0.13 ⛔ 1 known vulnerabilities
WP 6.0.12 ⛔ 7 known vulnerabilities
WP 6.0.11 ⛔ 7 known vulnerabilities
WP 6.0.10 ⛔ 9 known vulnerabilities
WP 6.0.9 ⛔ 9 known vulnerabilities
WP 6.0.8 ⛔ 12 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0.7 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0.6 ⛔ 15 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0.5 ⛔ 21 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0.4 ⛔ 21 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0.3 ⛔ 27 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0.2 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0.1 ⛔ 42 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 6.0 ⛔ 42 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
WP 5.9.16 ✓ No known vulnerabilities
WP 5.9.15 ⛔ 1 known vulnerabilities
WP 5.9.14 ⛔ 1 known vulnerabilities
WP 5.9.13 ⛔ 7 known vulnerabilities
WP 5.9.12 ⛔ 7 known vulnerabilities
WP 5.9.11 ⛔ 9 known vulnerabilities
WP 5.9.10 ⛔ 9 known vulnerabilities
WP 5.9.9 ⛔ 12 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.8 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.7 ⛔ 20 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.6 ⛔ 20 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.5 ⛔ 26 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.4 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.3 ⛔ 41 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.2 ⛔ 41 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9.1 ⛔ 44 known vulnerabilities
Vulnerability
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Fixed in: WP 5.9.2
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.9.2
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.9 ⛔ 44 known vulnerabilities
Vulnerability
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Fixed in: WP 5.9.2
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.9.2
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
WP 5.8.15 ✓ No known vulnerabilities
WP 5.8.14 ⛔ 1 known vulnerabilities
WP 5.8.13 ⛔ 7 known vulnerabilities
WP 5.8.12 ⛔ 7 known vulnerabilities
WP 5.8.11 ⛔ 9 known vulnerabilities
WP 5.8.10 ⛔ 9 known vulnerabilities
WP 5.8.9 ⛔ 12 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.8 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.7 ⛔ 19 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.6 ⛔ 25 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.5 ⛔ 37 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.4 ⛔ 40 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.3 ⛔ 42 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.2 ⛔ 46 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.1 ⛔ 47 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8 ⛔ 50 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.7.17 ✓ No known vulnerabilities
WP 5.7.16 ⛔ 1 known vulnerabilities
WP 5.7.15 ⛔ 7 known vulnerabilities
WP 5.7.14 ⛔ 7 known vulnerabilities
WP 5.7.13 ⛔ 9 known vulnerabilities
WP 5.7.12 ⛔ 9 known vulnerabilities
WP 5.7.11 ⛔ 12 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.10 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.9 ⛔ 19 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.8 ⛔ 25 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.7 ⛔ 37 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.6 ⛔ 40 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.5 ⛔ 42 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.4 ⛔ 46 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.3 ⛔ 47 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.2 ⛔ 50 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.1 ⛔ 51 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.7.1
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.7.1
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.6.19 ✓ No known vulnerabilities
WP 5.6.18 ⛔ 1 known vulnerabilities
WP 5.6.17 ⛔ 7 known vulnerabilities
WP 5.6.16 ⛔ 7 known vulnerabilities
WP 5.6.15 ⛔ 9 known vulnerabilities
WP 5.6.14 ⛔ 9 known vulnerabilities
WP 5.6.13 ⛔ 12 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.12 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.11 ⛔ 19 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.10 ⛔ 25 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.9 ⛔ 37 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.8 ⛔ 40 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.7 ⛔ 41 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.6 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.5 ⛔ 47 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.4 ⛔ 50 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.3 ⛔ 51 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.2 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.6.3
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.1 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.6.3
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.6.3
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.5.20 ✓ No known vulnerabilities
WP 5.5.19 ⛔ 1 known vulnerabilities
WP 5.5.18 ⛔ 6 known vulnerabilities
WP 5.5.17 ⛔ 6 known vulnerabilities
WP 5.5.16 ⛔ 8 known vulnerabilities
WP 5.5.15 ⛔ 8 known vulnerabilities
WP 5.5.14 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.13 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.12 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.11 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.10 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.9 ⛔ 37 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.8 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.7 ⛔ 43 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.6 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.5 ⛔ 47 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.4 ⛔ 49 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.3 ⛔ 50 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.2 ⛔ 50 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.1 ⛔ 58 known vulnerabilities
CVE-2020-28033
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Fixed in: WP 5.5.2
CVE-2020-28034
WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables
Fixed in: WP 5.5.2
CVE-2020-28039
WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion
Fixed in: WP 5.5.2
CVE-2020-28040
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Fixed in: WP 5.5.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5 ⛔ 58 known vulnerabilities
CVE-2020-28033
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Fixed in: WP 5.5.2
CVE-2020-28034
WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables
Fixed in: WP 5.5.2
CVE-2020-28039
WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion
Fixed in: WP 5.5.2
CVE-2020-28040
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Fixed in: WP 5.5.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.4.21 ✓ No known vulnerabilities
WP 5.4.20 ⛔ 1 known vulnerabilities
WP 5.4.19 ⛔ 6 known vulnerabilities
WP 5.4.18 ⛔ 6 known vulnerabilities
WP 5.4.17 ⛔ 8 known vulnerabilities
WP 5.4.16 ⛔ 8 known vulnerabilities
WP 5.4.15 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.14 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.13 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.12 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.11 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.10 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.9 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.8 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.7 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.6 ⛔ 48 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.5 ⛔ 49 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.4 ⛔ 50 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.3 ⛔ 50 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.2 ⛔ 50 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.1 ⛔ 56 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.4.2
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.4.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4 ⛔ 62 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.4.1
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.4.1
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.4.1
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.4.1
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.4.2
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.4.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.3.23 ✓ No known vulnerabilities
WP 5.3.22 ⛔ 1 known vulnerabilities
WP 5.3.21 ⛔ 6 known vulnerabilities
WP 5.3.20 ⛔ 6 known vulnerabilities
WP 5.3.19 ⛔ 8 known vulnerabilities
WP 5.3.18 ⛔ 8 known vulnerabilities
WP 5.3.17 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.16 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.15 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.14 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.13 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.12 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.11 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.10 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.9 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.8 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.7 ⛔ 46 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.6 ⛔ 47 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.5 ⛔ 47 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.4 ⛔ 47 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.3 ⛔ 53 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.2 ⛔ 59 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.1 ⛔ 59 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3 ⛔ 63 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.3.1
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.3.1
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.2.26 ✓ No known vulnerabilities
WP 5.2.25 ⛔ 1 known vulnerabilities
WP 5.2.24 ⛔ 6 known vulnerabilities
WP 5.2.23 ⛔ 6 known vulnerabilities
WP 5.2.22 ⛔ 8 known vulnerabilities
WP 5.2.21 ⛔ 8 known vulnerabilities
WP 5.2.20 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.19 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.18 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.17 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.16 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.15 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.14 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.13 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.12 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.11 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.10 ⛔ 46 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.9 ⛔ 47 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.8 ⛔ 47 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.7 ⛔ 47 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.6 ⛔ 53 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.5 ⛔ 59 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.4 ⛔ 63 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.3 ⛔ 70 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.2 ⛔ 76 known vulnerabilities
CVE-2019-16223
WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews
Fixed in: WP 5.2.3
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.1 ⛔ 72 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2 ⛔ 72 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.1.24 ✓ No known vulnerabilities
WP 5.1.23 ⛔ 1 known vulnerabilities
WP 5.1.22 ⛔ 6 known vulnerabilities
WP 5.1.21 ⛔ 6 known vulnerabilities
WP 5.1.20 ⛔ 8 known vulnerabilities
WP 5.1.19 ⛔ 8 known vulnerabilities
WP 5.1.18 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.17 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.16 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.15 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.14 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.13 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.12 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.11 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.10 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.9 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.8 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.7 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.6 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.5 ⛔ 52 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.4 ⛔ 57 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.3 ⛔ 61 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.2 ⛔ 68 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.1 ⛔ 70 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.1.2
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.1.2
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1 ⛔ 71 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.1.2
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.1.2
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.0.27 ✓ No known vulnerabilities
WP 5.0.26 ⛔ 1 known vulnerabilities
WP 5.0.25 ⛔ 6 known vulnerabilities
WP 5.0.24 ⛔ 6 known vulnerabilities
WP 5.0.23 ⛔ 8 known vulnerabilities
WP 5.0.22 ⛔ 8 known vulnerabilities
WP 5.0.21 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.20 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.19 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.18 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.17 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.16 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.15 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.14 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.13 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.12 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.11 ⛔ 47 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.0.12
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.10 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.9 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.8 ⛔ 51 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.7 ⛔ 55 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.6 ⛔ 62 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.4 ⛔ 64 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.3 ⛔ 65 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.2 ⛔ 65 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.1 ⛔ 70 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.0.10
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.0.10
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0 ⛔ 78 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 5.0.1
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.0.10
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.0.10
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5 ✓ No known vulnerabilities
WP 4.9.31 ✓ No known vulnerabilities
WP 4.9.30 ⛔ 1 known vulnerabilities
WP 4.9.29 ⛔ 6 known vulnerabilities
WP 4.9.28 ✓ No known vulnerabilities
WP 4.9.27 ⛔ 8 known vulnerabilities
WP 4.9.26 ⛔ 8 known vulnerabilities
WP 4.9.25 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.24 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.23 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.22 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.21 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.20 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.19 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.18 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.17 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.16 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.15 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.14 ⛔ 51 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.13 ⛔ 56 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.12 ⛔ 60 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.11 ⛔ 67 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.10 ⛔ 68 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.9 ⛔ 63 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.8 ⛔ 71 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.7 ⛔ 71 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.6 ⛔ 72 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.5 ⛔ 72 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.4 ⛔ 76 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.3 ⛔ 76 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.2 ⛔ 76 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.1 ⛔ 83 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9 ⛔ 87 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.8.30 ✓ No known vulnerabilities
WP 4.8.29 ⛔ 1 known vulnerabilities
WP 4.8.28 ⛔ 6 known vulnerabilities
WP 4.8.27 ⛔ 6 known vulnerabilities
WP 4.8.26 ⛔ 8 known vulnerabilities
WP 4.8.25 ⛔ 8 known vulnerabilities
WP 4.8.24 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.23 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.22 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.21 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.20 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.19 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.18 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.17 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.16 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.15 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.14 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.13 ⛔ 51 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.12 ⛔ 56 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.11 ⛔ 60 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.10 ⛔ 67 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.9 ⛔ 62 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.8.10
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.8 ⛔ 64 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.8.10
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 3.4.2 ⛔ 44 known vulnerabilities
Vulnerability
Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure
Fixed in: WP 3.5.2
CVE-2013-0235
WordPress 1.5.1-3.5 - XML-RPC Pingback API Internal/External Port Scanning
Fixed in: WP 3.5.1
Vulnerability
WordPress 1.5.1-3.5 - XML-RPC Pingback Additional Issues
Vulnerability
WordPress 3.4.2 - Cross-Site Request Forgery (CSRF)
CVE-2014-5204
WordPress 2.0.3 - 3.9.1 (except 3.7.4 / 3.8.4) CSRF Token Brute Forcing
Fixed in: WP 3.9.2
CVE-2014-5240
WordPress 3.0 - 3.9.1 Authenticated Cross-Site Scripting (XSS) in Multisite
Fixed in: WP 3.9.2
CVE-2014-9031
WordPress 3.0-3.9.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Fixed in: WP 4.0
CVE-2015-5622
WordPress <= 4.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in: WP 4.2.3
CVE-2016-4029
WordPress <= 4.4.2 - SSRF Bypass using Octal & Hexedecimal IP addresses
Fixed in: WP 4.5
CVE-2016-7168
WordPress 2.5-4.6 - Authenticated Stored Cross-Site Scripting via Image Filename
Fixed in: WP 4.6.1
CVE-2017-5488
WordPress 2.9-4.7 - Authenticated Cross-Site scripting (XSS) in update-core.php
Fixed in: WP 4.7.1
CVE-2017-5490
WordPress 3.4-4.7 - Stored Cross-Site Scripting (XSS) via Theme Name fallback
Fixed in: WP 4.7.1
CVE-2017-5491
WordPress <= 4.7 - Post via Email Checks mail.example.com by Default
Fixed in: WP 4.7.1
CVE-2017-5492
WordPress 2.8-4.7 - Accessibility Mode Cross-Site Request Forgery (CSRF)
Fixed in: WP 4.7.1
CVE-2017-5493
WordPress 3.0-4.7 - Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Fixed in: WP 4.7.1
CVE-2017-6815
WordPress 2.8.1-4.7.2 - Control Characters in Redirect URL Validation
Fixed in: WP 4.7.3
CVE-2017-9062
WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
Fixed in: WP 4.7.5
CVE-2017-9065
WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks
Fixed in: WP 4.7.5
CVE-2018-12895
WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
Don't want to check this manually?
MonitorWWW.com checks your site's version automatically and sends an email, SMS, or Telegram alert the moment a new critical vulnerability shows up.
See plans and pricingWant to know more about how vulnerability detection works? Read the article: Critical WordPress Vulnerabilities (CVE).