WordPress Vulnerability Database (CVE)
A list of WordPress core versions and their known, publicly documented security vulnerabilities (CVE). Data comes from WPScan and refreshes automatically every 30 minutes for versions actively monitored by MonitorWWW.com — the more sites we monitor, the broader the database gets.
442 versions checked
406 with known vulnerabilities
WP 7.1.4 ✓ No known vulnerabilities
WP 7.1.3 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.1.4
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.1.4
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.1.4
WP 7.1.2 ⛔ 28 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.1.3
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.1.3
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.1.4
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.1.4
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.1.4
WP 7.1.1 ⛔ 29 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.1.3
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.1.3
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.1.4
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.1.4
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.1.4
WP 7.1 ⛔ 39 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 7.1.1
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.1.3
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.1.3
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.1.4
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.1.4
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.1.4
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.1.4
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.1.4
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.1.4
WP 7.0.8 ✓ No known vulnerabilities
WP 7.0.7 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 7.0.6 ⛔ 28 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 7.0.5 ⛔ 29 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 7.0.4 ⛔ 39 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 7.0.5
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 7.0.3 ⛔ 40 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 7.0.5
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 7.0.2 ⛔ 52 known vulnerabilities
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 7.0.3
Vulnerability
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 7.0.5
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 7.0.1 ⛔ 54 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 7.0.2
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 7.0.3
Vulnerability
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 7.0.5
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 7.0 ⛔ 54 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 7.0.2
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 7.0.3
Vulnerability
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 7.0.3
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 7.0.5
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 7.0.7
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 7.0.8
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 7.0.8
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 7.0.8
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 7.0.8
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 7.0.8
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 7.0.8
WP 6.9.11 ✓ No known vulnerabilities
WP 6.9.10 ✓ No known vulnerabilities
WP 6.9.9 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
WP 6.9.8 ⛔ 8 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
WP 6.9.7 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
WP 6.9.6 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
WP 6.9.5 ⛔ 51 known vulnerabilities
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 6.9.11
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 6.9.11
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 6.9.11
WP 6.9.4 ⛔ 53 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 6.9.11
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 6.9.11
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 6.9.11
WP 6.9.3 ⛔ 53 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 6.9.11
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 6.9.11
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 6.9.11
WP 6.9.2 ⛔ 53 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 6.9.11
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 6.9.11
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 6.9.11
WP 6.9.1 ⛔ 53 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 6.9.11
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 6.9.11
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 6.9.11
WP 6.9 ⛔ 53 known vulnerabilities
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Fixed in: WP 6.9.5
Vulnerability
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Fixed in: WP 6.9.6
Vulnerability
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Fixed in: WP 6.9.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.9.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.9.10
Vulnerability
WP < 7.1.4 - Stored XSS in Multisite Network Users Screen (Defense-in-Depth)
Fixed in: WP 6.9.11
Vulnerability
WP 6.9 - 7.1.3 - Post Note Disclosure, Modification and Deletion via Comment Moderation Capability
Fixed in: WP 6.9.11
Vulnerability
WP 5.0 - 7.1.3 - Contributor+ Stored XSS via Customizer Selective Refresh
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Playlist and Image Blocks
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Context Namespace Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Bind Directive Prototype Pollution
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ Stored XSS via Script Module Data Shadowing
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Prototype-Chain Property Injection
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored DoS via Interactivity API Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 6.4 - 7.1.3 - Contributor+ Stored XSS via Interactivity API href Binding
Fixed in: WP 6.9.11
Vulnerability
WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Event Handler Bindings
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Previous Block
Fixed in: WP 6.9.11
Vulnerability
WP 5.9 - 7.1.3 - Contributor+ Stored XSS via Comments Pagination Next Block
Fixed in: WP 6.9.11
Vulnerability
WP 6.6 - 7.1.3 - Contributor+ KSES Restriction Bypass via Interactivity API Object Bindings
Fixed in: WP 6.9.11
WP 6.8.11 ✓ No known vulnerabilities
WP 6.8.10 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.8.11
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.8.11
WP 6.8.9 ⛔ 8 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.8.11
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.8.11
WP 6.8.8 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.8.11
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.8.11
WP 6.8.7 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.8.6 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.8.5 ⛔ 20 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.8.4 ⛔ 20 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.8.3 ⛔ 20 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.8.2 ⛔ 22 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.8.1 ⛔ 22 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.8 ⛔ 22 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.8.9
WP 6.7.10 ✓ No known vulnerabilities
WP 6.7.9 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.7.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.7.10
WP 6.7.8 ⛔ 8 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.7.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.7.10
WP 6.7.7 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.7.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.7.10
WP 6.7.6 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
WP 6.7.5 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
WP 6.7.4 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
WP 6.7.3 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
WP 6.7.2 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
WP 6.7.1 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
WP 6.7 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.7.8
WP 6.6.10 ✓ No known vulnerabilities
WP 6.6.9 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.6.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.6.10
WP 6.6.8 ⛔ 8 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.6.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.6.10
WP 6.6.7 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.6.10
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.6.10
WP 6.6.6 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
WP 6.6.5 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
WP 6.6.4 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
WP 6.6.3 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
WP 6.6.2 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
WP 6.6.1 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
WP 6.6 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.6.8
WP 6.5.13 ✓ No known vulnerabilities
WP 6.5.12 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.5.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.5.13
WP 6.5.11 ⛔ 8 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.5.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.5.13
WP 6.5.10 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.5.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.5.13
WP 6.5.9 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5.8 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5.7 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5.6 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5.5 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5.4 ⛔ 24 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5.3 ⛔ 24 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5.2 ⛔ 24 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.5 ⛔ 25 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.5.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.5.11
WP 6.4.13 ✓ No known vulnerabilities
WP 6.4.12 ⛔ 6 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.4.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.4.13
WP 6.4.11 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.4.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.4.13
WP 6.4.10 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.4.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.4.13
WP 6.4.9 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.8 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.7 ⛔ 19 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.6 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.5 ⛔ 21 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.4 ⛔ 24 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.3 ⛔ 25 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.2 ⛔ 27 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4.1 ⛔ 28 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.4 ⛔ 28 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.4.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.4.11
WP 6.3.13 ✓ No known vulnerabilities
WP 6.3.12 ⛔ 6 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.11 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.10 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.9 ⛔ 12 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
WP 6.3.8 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.7 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.6 ⛔ 27 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.5 ⛔ 27 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.4 ⛔ 30 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.3 ⛔ 31 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.2 ⛔ 33 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3.1 ⛔ 40 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.3 ⛔ 40 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.3.5
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.3.11
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.3.13
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.3.13
WP 6.2.14 ✓ No known vulnerabilities
WP 6.2.13 ⛔ 6 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.12 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.11 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.10 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.9 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.8 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.7 ⛔ 27 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.6 ⛔ 27 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.5 ⛔ 30 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.4 ⛔ 31 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.3 ⛔ 33 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.2 ⛔ 39 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2.1 ⛔ 40 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.2 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.2.6
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.2.12
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.2.14
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.2.14
WP 6.1.15 ✓ No known vulnerabilities
WP 6.1.14 ⛔ 6 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.13 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.12 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.11 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.10 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.9 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.8 ⛔ 27 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.7 ⛔ 27 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.6 ⛔ 30 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.5 ⛔ 31 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.4 ⛔ 33 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.3 ⛔ 39 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.2 ⛔ 39 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1.1 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.1 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.1.7
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.1.13
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.1.15
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.1.15
WP 6.0.17 ✓ No known vulnerabilities
WP 6.0.16 ⛔ 6 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.15 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.14 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.13 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.12 ⛔ 24 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.11 ⛔ 24 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.10 ⛔ 26 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.9 ⛔ 26 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.8 ⛔ 29 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.7 ⛔ 30 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.6 ⛔ 32 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.5 ⛔ 38 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.4 ⛔ 38 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.3 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.2 ⛔ 56 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0.1 ⛔ 59 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 6.0 ⛔ 59 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 6.0.9
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 6.0.15
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 6.0.17
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 6.0.17
WP 5.9.19 ✓ No known vulnerabilities
WP 5.9.18 ⛔ 6 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.17 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.16 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.15 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.14 ⛔ 18 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.13 ⛔ 24 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.12 ⛔ 24 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.11 ⛔ 26 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.10 ⛔ 26 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.9 ⛔ 29 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.8 ⛔ 31 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.7 ⛔ 37 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.6 ⛔ 37 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.5 ⛔ 43 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.4 ⛔ 55 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.3 ⛔ 58 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.2 ⛔ 58 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9.1 ⛔ 61 known vulnerabilities
Vulnerability
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Fixed in: WP 5.9.2
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.9.2
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.9 ⛔ 61 known vulnerabilities
Vulnerability
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Fixed in: WP 5.9.2
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.9.2
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.9.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.9.17
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.9.19
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.9.19
WP 5.8.18 ✓ No known vulnerabilities
WP 5.8.17 ⛔ 6 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.16 ⛔ 7 known vulnerabilities
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.15 ⛔ 16 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.14 ⛔ 17 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.13 ⛔ 23 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.12 ⛔ 23 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.11 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.10 ⛔ 25 known vulnerabilities
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.9 ⛔ 28 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.8 ⛔ 30 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.7 ⛔ 35 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.6 ⛔ 41 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.5 ⛔ 53 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WP < 7.1.1 - Author+ Unpublished Post Title Disclosure via Attachment Edit Screen
Fixed in: WP 5.8.16
Vulnerability
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Fixed in: WP 5.8.18
Vulnerability
WP < 7.1.3 - Unauthenticated Private Post Comment Disclosure via RSS Feed
Fixed in: WP 5.8.18
WP 5.8.4 ⛔ 40 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.3 ⛔ 42 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.2 ⛔ 46 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8.1 ⛔ 47 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.8 ⛔ 50 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.8.10
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.8.10
WP 5.7.19 ✓ No known vulnerabilities
WP 5.7.18 ✓ No known vulnerabilities
WP 5.7.17 ✓ No known vulnerabilities
WP 5.7.16 ⛔ 1 known vulnerabilities
WP 5.7.15 ⛔ 7 known vulnerabilities
WP 5.7.14 ⛔ 7 known vulnerabilities
WP 5.7.13 ⛔ 9 known vulnerabilities
WP 5.7.12 ⛔ 9 known vulnerabilities
WP 5.7.11 ⛔ 12 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.10 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.9 ⛔ 19 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.8 ⛔ 25 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.7 ⛔ 37 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.6 ⛔ 40 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.5 ⛔ 42 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.4 ⛔ 46 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.3 ⛔ 47 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.2 ⛔ 50 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7.1 ⛔ 51 known vulnerabilities
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.7 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.7.1
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.7.1
Vulnerability
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Fixed in: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.7.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.7.12
WP 5.6.21 ✓ No known vulnerabilities
WP 5.6.20 ✓ No known vulnerabilities
WP 5.6.19 ✓ No known vulnerabilities
WP 5.6.18 ⛔ 1 known vulnerabilities
WP 5.6.17 ⛔ 7 known vulnerabilities
WP 5.6.16 ⛔ 7 known vulnerabilities
WP 5.6.15 ⛔ 9 known vulnerabilities
WP 5.6.14 ⛔ 9 known vulnerabilities
WP 5.6.13 ⛔ 12 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.12 ⛔ 14 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.11 ⛔ 19 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.10 ⛔ 25 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.9 ⛔ 37 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.8 ⛔ 40 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.7 ⛔ 41 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.6 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.5 ⛔ 47 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.4 ⛔ 50 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.3 ⛔ 51 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.2 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.6.3
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6.1 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.6.3
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.6 ⛔ 53 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.6.3
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.6.11
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.6.14
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.6.14
WP 5.5.22 ✓ No known vulnerabilities
WP 5.5.21 ✓ No known vulnerabilities
WP 5.5.20 ✓ No known vulnerabilities
WP 5.5.19 ⛔ 1 known vulnerabilities
WP 5.5.18 ⛔ 6 known vulnerabilities
WP 5.5.17 ⛔ 6 known vulnerabilities
WP 5.5.16 ⛔ 8 known vulnerabilities
WP 5.5.15 ⛔ 8 known vulnerabilities
WP 5.5.14 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.13 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.12 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.11 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.10 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.9 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.8 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.7 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.6 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.5 ⛔ 48 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.4 ⛔ 49 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.3 ⛔ 50 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.2 ⛔ 50 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5.1 ⛔ 58 known vulnerabilities
CVE-2020-28033
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Fixed in: WP 5.5.2
CVE-2020-28034
WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables
Fixed in: WP 5.5.2
CVE-2020-28039
WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion
Fixed in: WP 5.5.2
CVE-2020-28040
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Fixed in: WP 5.5.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.5 ⛔ 58 known vulnerabilities
CVE-2020-28033
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Fixed in: WP 5.5.2
CVE-2020-28034
WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables
Fixed in: WP 5.5.2
CVE-2020-28039
WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion
Fixed in: WP 5.5.2
CVE-2020-28040
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Fixed in: WP 5.5.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.5.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.5.12
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.5.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.5.15
WP 5.4.23 ✓ No known vulnerabilities
WP 5.4.22 ✓ No known vulnerabilities
WP 5.4.21 ✓ No known vulnerabilities
WP 5.4.20 ⛔ 1 known vulnerabilities
WP 5.4.19 ⛔ 6 known vulnerabilities
WP 5.4.18 ⛔ 6 known vulnerabilities
WP 5.4.17 ⛔ 8 known vulnerabilities
WP 5.4.16 ⛔ 8 known vulnerabilities
WP 5.4.15 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.14 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.13 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.12 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.11 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.10 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.9 ⛔ 47 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.8 ⛔ 52 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.7 ⛔ 53 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.6 ⛔ 56 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.5 ⛔ 57 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.4 ⛔ 58 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.3 ⛔ 58 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.2 ⛔ 58 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4.1 ⛔ 64 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.4.2
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.4.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.4 ⛔ 70 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.4.1
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.4.1
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.4.1
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.4.1
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.4.2
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.4.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.4.5
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.4.13
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.4.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.4.16
WP 5.3.25 ✓ No known vulnerabilities
WP 5.3.24 ✓ No known vulnerabilities
WP 5.3.23 ⛔ 8 known vulnerabilities
WP 5.3.22 ⛔ 9 known vulnerabilities
WP 5.3.21 ⛔ 14 known vulnerabilities
WP 5.3.20 ⛔ 14 known vulnerabilities
WP 5.3.19 ⛔ 16 known vulnerabilities
WP 5.3.18 ⛔ 16 known vulnerabilities
WP 5.3.17 ⛔ 19 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.16 ⛔ 21 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.15 ⛔ 25 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.14 ⛔ 31 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.13 ⛔ 43 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.12 ⛔ 46 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.11 ⛔ 47 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.10 ⛔ 52 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.9 ⛔ 53 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.8 ⛔ 53 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.7 ⛔ 54 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.6 ⛔ 55 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.5 ⛔ 55 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.4 ⛔ 55 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.3 ⛔ 61 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.2 ⛔ 67 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3.1 ⛔ 67 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.3 ⛔ 72 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.3.1
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.3.1
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.3.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.3.15
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.3.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.3.18
WP 5.2.28 ✓ No known vulnerabilities
WP 5.2.27 ⛔ 1 known vulnerabilities
WP 5.2.26 ⛔ 8 known vulnerabilities
WP 5.2.25 ⛔ 9 known vulnerabilities
WP 5.2.24 ⛔ 14 known vulnerabilities
WP 5.2.23 ⛔ 14 known vulnerabilities
WP 5.2.22 ⛔ 16 known vulnerabilities
WP 5.2.21 ⛔ 16 known vulnerabilities
WP 5.2.20 ⛔ 19 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.19 ⛔ 21 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.18 ⛔ 25 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.17 ⛔ 31 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.16 ⛔ 43 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.15 ⛔ 46 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.14 ⛔ 47 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.13 ⛔ 52 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.12 ⛔ 53 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.11 ⛔ 53 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.10 ⛔ 54 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.9 ⛔ 55 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.8 ⛔ 55 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.7 ⛔ 55 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.6 ⛔ 61 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.5 ⛔ 67 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.4 ⛔ 71 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.3 ⛔ 78 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.2 ⛔ 84 known vulnerabilities
CVE-2019-16223
WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews
Fixed in: WP 5.2.3
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2.1 ⛔ 80 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.2 ⛔ 80 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Fixed in: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.2.10
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.2.18
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.2.21
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.2.21
WP 5.1.24 ✓ No known vulnerabilities
WP 5.1.23 ⛔ 1 known vulnerabilities
WP 5.1.22 ⛔ 6 known vulnerabilities
WP 5.1.21 ⛔ 6 known vulnerabilities
WP 5.1.20 ⛔ 8 known vulnerabilities
WP 5.1.19 ⛔ 8 known vulnerabilities
WP 5.1.18 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.17 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.16 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.15 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.14 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.13 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.12 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.11 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.10 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.9 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.8 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.7 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.6 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.5 ⛔ 52 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.4 ⛔ 57 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.3 ⛔ 61 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.2 ⛔ 68 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1.1 ⛔ 70 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.1.2
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.1.2
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.1 ⛔ 71 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.1.2
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.1.2
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.1.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.1.16
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.1.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.1.19
WP 5.0.27 ✓ No known vulnerabilities
WP 5.0.26 ⛔ 1 known vulnerabilities
WP 5.0.25 ⛔ 6 known vulnerabilities
WP 5.0.24 ⛔ 6 known vulnerabilities
WP 5.0.23 ⛔ 8 known vulnerabilities
WP 5.0.22 ⛔ 8 known vulnerabilities
WP 5.0.21 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.20 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.19 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.18 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.17 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.16 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.15 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.14 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.13 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.12 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.11 ⛔ 47 known vulnerabilities
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Fixed in: WP 5.0.12
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.10 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.9 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.8 ⛔ 51 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.7 ⛔ 55 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.6 ⛔ 62 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.4 ⛔ 64 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.3 ⛔ 65 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.2 ⛔ 65 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0.1 ⛔ 70 known vulnerabilities
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.0.10
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.0.10
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5.0 ⛔ 78 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 5.0.1
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Fixed in: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 5.0.9
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 5.0.10
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 5.0.10
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 5.0.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 5.0.19
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 5.0.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 5.0.22
WP 5 ✓ No known vulnerabilities
WP 4.9.31 ✓ No known vulnerabilities
WP 4.9.30 ⛔ 1 known vulnerabilities
WP 4.9.29 ⛔ 6 known vulnerabilities
WP 4.9.28 ✓ No known vulnerabilities
WP 4.9.27 ⛔ 8 known vulnerabilities
WP 4.9.26 ⛔ 8 known vulnerabilities
WP 4.9.25 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.24 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.23 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.22 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.21 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.20 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.19 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.18 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.17 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.16 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.15 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.14 ⛔ 51 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.13 ⛔ 56 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.12 ⛔ 60 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.11 ⛔ 67 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.10 ⛔ 68 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.9 ⛔ 63 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.8 ⛔ 71 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.7 ⛔ 71 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.6 ⛔ 72 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.5 ⛔ 72 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.4 ⛔ 76 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.3 ⛔ 76 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.2 ⛔ 76 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9.1 ⛔ 83 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.9 ⛔ 87 known vulnerabilities
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Fixed in: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.9.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.9.17
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.9.23
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.9.26
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.9.26
WP 4.8.30 ✓ No known vulnerabilities
WP 4.8.29 ⛔ 1 known vulnerabilities
WP 4.8.28 ⛔ 6 known vulnerabilities
WP 4.8.27 ⛔ 6 known vulnerabilities
WP 4.8.26 ⛔ 8 known vulnerabilities
WP 4.8.25 ⛔ 8 known vulnerabilities
WP 4.8.24 ⛔ 11 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.23 ⛔ 13 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.22 ⛔ 17 known vulnerabilities
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.21 ⛔ 23 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.20 ⛔ 35 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.19 ⛔ 38 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.18 ⛔ 39 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.17 ⛔ 44 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.16 ⛔ 45 known vulnerabilities
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.15 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.14 ⛔ 46 known vulnerabilities
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.13 ⛔ 51 known vulnerabilities
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.12 ⛔ 56 known vulnerabilities
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.11 ⛔ 60 known vulnerabilities
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.10 ⛔ 67 known vulnerabilities
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Fixed in: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Fixed in: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.9 ⛔ 62 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.8.10
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 4.8.8 ⛔ 64 known vulnerabilities
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 4.8.10
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Fixed in: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Fixed in: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Fixed in: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Fixed in: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Fixed in: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Fixed in: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Fixed in: WP 4.8.13
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Fixed in: WP 4.8.16
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Vulnerability
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Fixed in: WP 4.8.22
Vulnerability
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Fixed in: WP 4.8.25
Vulnerability
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Fixed in: WP 4.8.25
WP 3.4.2 ⛔ 44 known vulnerabilities
Vulnerability
Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure
Fixed in: WP 3.5.2
CVE-2013-0235
WordPress 1.5.1-3.5 - XML-RPC Pingback API Internal/External Port Scanning
Fixed in: WP 3.5.1
Vulnerability
WordPress 1.5.1-3.5 - XML-RPC Pingback Additional Issues
Vulnerability
WordPress 3.4.2 - Cross-Site Request Forgery (CSRF)
CVE-2014-5204
WordPress 2.0.3 - 3.9.1 (except 3.7.4 / 3.8.4) CSRF Token Brute Forcing
Fixed in: WP 3.9.2
CVE-2014-5240
WordPress 3.0 - 3.9.1 Authenticated Cross-Site Scripting (XSS) in Multisite
Fixed in: WP 3.9.2
CVE-2014-9031
WordPress 3.0-3.9.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Fixed in: WP 4.0
CVE-2015-5622
WordPress <= 4.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in: WP 4.2.3
CVE-2016-4029
WordPress <= 4.4.2 - SSRF Bypass using Octal & Hexedecimal IP addresses
Fixed in: WP 4.5
CVE-2016-7168
WordPress 2.5-4.6 - Authenticated Stored Cross-Site Scripting via Image Filename
Fixed in: WP 4.6.1
CVE-2017-5488
WordPress 2.9-4.7 - Authenticated Cross-Site scripting (XSS) in update-core.php
Fixed in: WP 4.7.1
CVE-2017-5490
WordPress 3.4-4.7 - Stored Cross-Site Scripting (XSS) via Theme Name fallback
Fixed in: WP 4.7.1
CVE-2017-5491
WordPress <= 4.7 - Post via Email Checks mail.example.com by Default
Fixed in: WP 4.7.1
CVE-2017-5492
WordPress 2.8-4.7 - Accessibility Mode Cross-Site Request Forgery (CSRF)
Fixed in: WP 4.7.1
CVE-2017-5493
WordPress 3.0-4.7 - Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Fixed in: WP 4.7.1
CVE-2017-6815
WordPress 2.8.1-4.7.2 - Control Characters in Redirect URL Validation
Fixed in: WP 4.7.3
CVE-2017-9062
WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
Fixed in: WP 4.7.5
CVE-2017-9065
WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks
Fixed in: WP 4.7.5
CVE-2018-12895
WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Fixed in: WP 5.2.3
An alert when WordPress patches security flaws
One email on the day a WordPress security release reaches the vulnerability database — with the list of flaws and the version to update to. No other messages.
Subscription requires confirmation via an emailed link. You can unsubscribe with one click. Details in the privacy policy.
Don't want to check this manually?
MonitorWWW.com checks your site's version automatically and sends an email, SMS, or Telegram alert the moment a new critical vulnerability shows up.
See plans and pricingWant to know more about how vulnerability detection works? Read the article: Critical WordPress Vulnerabilities (CVE).