Baza podatności WordPress (CVE)
Lista wersji rdzenia WordPress wraz ze znanymi, publicznie udokumentowanymi podatnościami bezpieczeństwa (CVE). Dane pochodzą z baz WPScan i są aktualizowane automatycznie co 30 minut dla wersji aktywnie monitorowanych przez MonitorWWW.com — im więcej stron monitorujemy, tym szersza baza.
385 sprawdzonych wersji
358 z znanymi podatnościami
WP 7.1 ✓ Brak znanych podatności
WP 7.0.4 ✓ Brak znanych podatności
WP 7.0.3 ⛔ 1 znanych podatności
WP 7.0.2 ⛔ 13 znanych podatności
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 7.0.3
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
Podatność
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Naprawione w: WP 7.0.3
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 7.0.3
WP 7.0.1 ⛔ 15 znanych podatności
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Naprawione w: WP 7.0.2
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 7.0.3
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
Podatność
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Naprawione w: WP 7.0.3
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 7.0.3
WP 7.0 ⛔ 15 znanych podatności
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Naprawione w: WP 7.0.2
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 7.0.3
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
Podatność
WP 7.0.x - Unauthenticated Password Protected Post Comment Disclosure via Gutenberg Latest Comments Block
Naprawione w: WP 7.0.3
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 7.0.3
WP 6.9.7 ✓ Brak znanych podatności
WP 6.9.6 ⛔ 1 znanych podatności
WP 6.9.5 ⛔ 12 znanych podatności
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 6.9.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.9.6
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 6.9.6
WP 6.9.4 ⛔ 14 znanych podatności
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Naprawione w: WP 6.9.5
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 6.9.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.9.6
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 6.9.6
WP 6.9.3 ⛔ 14 znanych podatności
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Naprawione w: WP 6.9.5
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 6.9.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.9.6
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 6.9.6
WP 6.9.2 ⛔ 14 znanych podatności
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Naprawione w: WP 6.9.5
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 6.9.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.9.6
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 6.9.6
WP 6.9.1 ⛔ 14 znanych podatności
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Naprawione w: WP 6.9.5
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 6.9.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.9.6
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 6.9.6
WP 6.9 ⛔ 14 znanych podatności
CVE-2026-63030
WordPress < 7.0.2 - REST API batch-route confusion and SQLi to RCE
Naprawione w: WP 6.9.5
Podatność
WP < 7.0.3 - Unauthenticated Internal Note Disclosure via Comment Feeds
Naprawione w: WP 6.9.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.9.6
Podatność
WP < 7.0.3 - Contributor+ Stored XSS via Gutenberg Post Content Block
Naprawione w: WP 6.9.6
WP 6.8.8 ✓ Brak znanych podatności
WP 6.8.7 ⛔ 1 znanych podatności
WP 6.8.6 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.8.7
WP 6.8.5 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.8.7
WP 6.8.4 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.8.7
WP 6.8.3 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.8.7
WP 6.8.2 ⛔ 11 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.8.7
WP 6.8.1 ⛔ 11 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.8.7
WP 6.8 ⛔ 11 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 6.8.7
WP 6.7.7 ✓ Brak znanych podatności
WP 6.7.6 ⛔ 1 znanych podatności
WP 6.7.5 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.7.4 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.7.3 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.7.2 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.7.1 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.7 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.6.7 ✓ Brak znanych podatności
WP 6.6.6 ⛔ 1 znanych podatności
WP 6.6.5 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.6.4 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.6.3 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.6.2 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.6.1 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.6 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5.10 ✓ Brak znanych podatności
WP 6.5.9 ⛔ 1 znanych podatności
WP 6.5.8 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5.7 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5.6 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5.5 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5.4 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.5.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5.3 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.5.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5.2 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.5.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.5 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.5.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.10 ✓ Brak znanych podatności
WP 6.4.9 ⛔ 1 znanych podatności
WP 6.4.8 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.7 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.6 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.5 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.4 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.4.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.3 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.4.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.2 ⛔ 16 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.4.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4.1 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.4.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.4 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.4.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.10 ✓ Brak znanych podatności
WP 6.3.9 ⛔ 1 znanych podatności
WP 6.3.8 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.7 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.6 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.5 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.4 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.3.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.3 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.3.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.2 ⛔ 16 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.3.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3.1 ⛔ 23 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.3.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.3 ⛔ 23 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.3.5
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.11 ✓ Brak znanych podatności
WP 6.2.10 ⛔ 1 znanych podatności
WP 6.2.9 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.8 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.7 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.6 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.5 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.2.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.4 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.2.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.3 ⛔ 16 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.2.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.2 ⛔ 22 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.2.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2.1 ⛔ 23 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.2.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.2 ⛔ 28 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.2.6
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.12 ✓ Brak znanych podatności
WP 6.1.11 ✓ Brak znanych podatności
WP 6.1.10 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.9 ⛔ 8 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.8 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.7 ⛔ 10 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.6 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.1.7
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.5 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.1.7
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.4 ⛔ 16 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.1.7
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.3 ⛔ 22 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.1.7
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.2 ⛔ 22 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.1.7
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1.1 ⛔ 28 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.1.7
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.1 ⛔ 28 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.1.7
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.14 ✓ Brak znanych podatności
WP 6.0.13 ⛔ 1 znanych podatności
WP 6.0.12 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.11 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.10 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.9 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.8 ⛔ 12 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.7 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.6 ⛔ 15 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.5 ⛔ 21 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.4 ⛔ 21 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.3 ⛔ 27 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.2 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0.1 ⛔ 42 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 6.0 ⛔ 42 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 6.0.9
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.16 ✓ Brak znanych podatności
WP 5.9.15 ⛔ 1 znanych podatności
WP 5.9.14 ⛔ 1 znanych podatności
WP 5.9.13 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.12 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.11 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.10 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.9 ⛔ 12 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.8 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.7 ⛔ 20 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.6 ⛔ 20 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.5 ⛔ 26 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.4 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.3 ⛔ 41 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.2 ⛔ 41 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9.1 ⛔ 44 znanych podatności
Podatność
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Naprawione w: WP 5.9.2
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.9.2
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.9 ⛔ 44 znanych podatności
Podatność
WordPress (5.9-5.9.1) / Gutenberg (9.8.0-12.7.1) - Contributor+ Stored Cross-Site Scripting
Naprawione w: WP 5.9.2
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.9.2
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.9.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.9.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.15 ✓ Brak znanych podatności
WP 5.8.14 ⛔ 1 znanych podatności
WP 5.8.13 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.12 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.11 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.10 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.9 ⛔ 12 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.8 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.7 ⛔ 19 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.6 ⛔ 25 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.5 ⛔ 37 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.4 ⛔ 40 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.3 ⛔ 42 znanych podatności
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.2 ⛔ 46 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.8.3
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8.1 ⛔ 47 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.8.3
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.8 ⛔ 50 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.8.3
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.8.4
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.8.10
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.8.10
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.17 ✓ Brak znanych podatności
WP 5.7.16 ⛔ 1 znanych podatności
WP 5.7.15 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.14 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.13 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.12 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.11 ⛔ 12 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.10 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.9 ⛔ 19 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.8 ⛔ 25 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.7 ⛔ 37 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.6 ⛔ 40 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.5 ⛔ 42 znanych podatności
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.4 ⛔ 46 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.7.5
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.3 ⛔ 47 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.7.5
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.2 ⛔ 50 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.7.5
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7.1 ⛔ 51 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.7.5
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.7 ⛔ 53 znanych podatności
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Naprawione w: WP 5.7.1
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.7.1
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.7.5
Podatność
WordPress < 5.9.2 / Gutenberg < 12.7.2 - Prototype Pollution via Gutenberg’s wordpress/url package
Naprawione w: WP 5.7.6
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.7.12
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.7.12
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.19 ✓ Brak znanych podatności
WP 5.6.18 ⛔ 1 znanych podatności
WP 5.6.17 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.16 ⛔ 7 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.15 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.14 ⛔ 9 znanych podatności
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.13 ⛔ 12 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.12 ⛔ 14 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.11 ⛔ 19 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.10 ⛔ 25 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.9 ⛔ 37 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.8 ⛔ 40 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.7 ⛔ 41 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.6 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.6.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.5 ⛔ 47 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.6.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.4 ⛔ 50 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.6.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.3 ⛔ 51 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.6.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.2 ⛔ 53 znanych podatności
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Naprawione w: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.6.3
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.6.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6.1 ⛔ 53 znanych podatności
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Naprawione w: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.6.3
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.6.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.6 ⛔ 53 znanych podatności
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Naprawione w: WP 5.6.3
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.6.3
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.6.7
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.6.11
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.6.14
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.6.14
CVE-2023-5692
WP < 7.0.3 - Unauthenticated Non-Public Post Type Slug Disclosure
Naprawione w: WP 7.0.3
WP 5.5.20 ✓ Brak znanych podatności
WP 5.5.19 ⛔ 1 znanych podatności
WP 5.5.18 ⛔ 6 znanych podatności
WP 5.5.17 ⛔ 6 znanych podatności
WP 5.5.16 ⛔ 8 znanych podatności
WP 5.5.15 ⛔ 8 znanych podatności
WP 5.5.14 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.13 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.12 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.11 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.10 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.9 ⛔ 37 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.8 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.7 ⛔ 43 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.6 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.5 ⛔ 47 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.4 ⛔ 49 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.3 ⛔ 50 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.5.4
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.2 ⛔ 50 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.5.4
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5.1 ⛔ 58 znanych podatności
CVE-2020-28033
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Naprawione w: WP 5.5.2
CVE-2020-28034
WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables
Naprawione w: WP 5.5.2
CVE-2020-28039
WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion
Naprawione w: WP 5.5.2
CVE-2020-28040
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Naprawione w: WP 5.5.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.5.4
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.5 ⛔ 58 znanych podatności
CVE-2020-28033
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Naprawione w: WP 5.5.2
CVE-2020-28034
WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables
Naprawione w: WP 5.5.2
CVE-2020-28039
WordPress < 5.5.2 - Protected Meta That Could Lead to Arbitrary File Deletion
Naprawione w: WP 5.5.2
CVE-2020-28040
WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background
Naprawione w: WP 5.5.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.5.4
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.5.8
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.5.12
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.5.15
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.5.15
WP 5.4.21 ✓ Brak znanych podatności
WP 5.4.20 ⛔ 1 znanych podatności
WP 5.4.19 ⛔ 6 znanych podatności
WP 5.4.18 ⛔ 6 znanych podatności
WP 5.4.17 ⛔ 8 znanych podatności
WP 5.4.16 ⛔ 8 znanych podatności
WP 5.4.15 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.14 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.13 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.12 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.11 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.10 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.9 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.8 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.7 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.6 ⛔ 48 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.5 ⛔ 49 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.4 ⛔ 50 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.4.5
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.3 ⛔ 50 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.4.5
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.2 ⛔ 50 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.4.5
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4.1 ⛔ 56 znanych podatności
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.4.2
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.4.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.4.5
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.4 ⛔ 62 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.4.1
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.4.1
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.4.1
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.4.1
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.4.1
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.4.2
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.4.2
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.4.5
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.4.9
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.4.13
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.4.16
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.4.16
WP 5.3.23 ✓ Brak znanych podatności
WP 5.3.22 ⛔ 1 znanych podatności
WP 5.3.21 ⛔ 6 znanych podatności
WP 5.3.20 ⛔ 6 znanych podatności
WP 5.3.19 ⛔ 8 znanych podatności
WP 5.3.18 ⛔ 8 znanych podatności
WP 5.3.17 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.16 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.15 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.14 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.13 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.12 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.11 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.10 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.9 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.8 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.7 ⛔ 46 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.6 ⛔ 47 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.3.7
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.5 ⛔ 47 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.3.7
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.4 ⛔ 47 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.3.7
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.3 ⛔ 53 znanych podatności
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.3.7
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.2 ⛔ 59 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.3.3
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.3.7
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3.1 ⛔ 59 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.3.3
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.3.7
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.3 ⛔ 63 znanych podatności
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.3.1
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.3.1
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.3.3
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.3.3
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.3.3
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.3.3
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.3.3
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.3.4
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.3.4
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.3.7
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.3.11
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.3.15
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.3.18
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.3.18
WP 5.2.26 ✓ Brak znanych podatności
WP 5.2.25 ⛔ 1 znanych podatności
WP 5.2.24 ⛔ 6 znanych podatności
WP 5.2.23 ⛔ 6 znanych podatności
WP 5.2.22 ⛔ 8 znanych podatności
WP 5.2.21 ⛔ 8 znanych podatności
WP 5.2.20 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.19 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.18 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.17 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.16 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.15 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.14 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.13 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.12 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.11 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.10 ⛔ 46 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.9 ⛔ 47 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.8 ⛔ 47 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.7 ⛔ 47 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.6 ⛔ 53 znanych podatności
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.5 ⛔ 59 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.2.6
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.4 ⛔ 63 znanych podatności
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.2.6
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.3 ⛔ 70 znanych podatności
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.2.6
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.2 ⛔ 76 znanych podatności
CVE-2019-16218
WordPress 5.2.2 - Cross-Site Scripting (XSS) in Stored Comments
Naprawione w: WP 5.2.3
CVE-2019-16223
WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews
Naprawione w: WP 5.2.3
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.2.6
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2.1 ⛔ 72 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.2.6
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.2 ⛔ 72 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.2.3
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.2.3
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.2.4
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.2.5
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.2.5
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.2.6
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.2.6
CVE-2020-11030
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Search Block
Naprawione w: WP 5.2.6
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.2.6
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.2.6
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.2.7
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.2.7
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.2.10
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.2.14
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.2.18
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.2.21
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.2.21
WP 5.1.24 ✓ Brak znanych podatności
WP 5.1.23 ⛔ 1 znanych podatności
WP 5.1.22 ⛔ 6 znanych podatności
WP 5.1.21 ⛔ 6 znanych podatności
WP 5.1.20 ⛔ 8 znanych podatności
WP 5.1.19 ⛔ 8 znanych podatności
WP 5.1.18 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.17 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.16 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.15 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.14 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.13 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.12 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.11 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.10 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.9 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.8 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.7 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.6 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.5 ⛔ 52 znanych podatności
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.4 ⛔ 57 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.1.5
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.3 ⛔ 61 znanych podatności
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.1.5
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.2 ⛔ 68 znanych podatności
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.1.5
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1.1 ⛔ 70 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.1.2
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.1.2
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.1.5
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.1 ⛔ 71 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.1.2
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.1.2
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.1.3
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.1.4
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.1.4
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.1.5
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.1.5
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.1.5
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.1.5
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.1.6
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.1.6
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.1.9
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.1.12
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.1.16
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.1.19
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.1.19
WP 5.0.27 ✓ Brak znanych podatności
WP 5.0.26 ⛔ 1 znanych podatności
WP 5.0.25 ⛔ 6 znanych podatności
WP 5.0.24 ⛔ 6 znanych podatności
WP 5.0.23 ⛔ 8 znanych podatności
WP 5.0.22 ⛔ 8 znanych podatności
WP 5.0.21 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.20 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.19 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.18 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.17 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.16 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.15 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.14 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.13 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.12 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.11 ⛔ 47 znanych podatności
CVE-2021-29447
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Naprawione w: WP 5.0.12
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.10 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.9 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.8 ⛔ 51 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.7 ⛔ 55 znanych podatności
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.6 ⛔ 62 znanych podatności
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.4 ⛔ 64 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.3 ⛔ 65 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.2 ⛔ 65 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0.1 ⛔ 70 znanych podatności
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.0.10
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.0.10
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5.0 ⛔ 78 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 5.0.1
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 5.0.1
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 5.0.1
CVE-2019-16219
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Naprawione w: WP 5.0.6
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.0.6
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 5.0.7
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 5.0.8
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 5.0.8
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 5.0.9
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 5.0.9
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 5.0.9
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 5.0.9
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 5.0.10
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 5.0.10
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 5.0.12
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 5.0.15
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 5.0.19
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 5.0.22
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 5.0.22
WP 5 ✓ Brak znanych podatności
WP 4.9.31 ✓ Brak znanych podatności
WP 4.9.30 ⛔ 1 znanych podatności
WP 4.9.29 ⛔ 6 znanych podatności
WP 4.9.28 ✓ Brak znanych podatności
WP 4.9.27 ⛔ 8 znanych podatności
WP 4.9.26 ⛔ 8 znanych podatności
WP 4.9.25 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.24 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.23 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.22 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.21 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.20 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.19 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.18 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.17 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.16 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.15 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.14 ⛔ 51 znanych podatności
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.13 ⛔ 56 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.12 ⛔ 60 znanych podatności
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.11 ⛔ 67 znanych podatności
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.10 ⛔ 68 znanych podatności
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.9 ⛔ 63 znanych podatności
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.8 ⛔ 71 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.7 ⛔ 71 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.6 ⛔ 72 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.5 ⛔ 72 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.4 ⛔ 76 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.3 ⛔ 76 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.2 ⛔ 76 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9.1 ⛔ 83 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.9 ⛔ 87 znanych podatności
CVE-2018-20150
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins
Naprawione w: WP 4.9.9
CVE-2018-20151
WordPress <= 5.0 - User Activation Screen Search Engine Indexing
Naprawione w: WP 4.9.9
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 4.9.9
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.9.11
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.9.12
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.9.12
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.9.13
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.9.13
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.9.13
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.9.14
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.9.14
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.9.14
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.9.14
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.9.15
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.9.15
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.9.17
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.9.19
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.9.23
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.9.26
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.9.26
WP 4.8.30 ✓ Brak znanych podatności
WP 4.8.29 ⛔ 1 znanych podatności
WP 4.8.28 ⛔ 6 znanych podatności
WP 4.8.27 ⛔ 6 znanych podatności
WP 4.8.26 ⛔ 8 znanych podatności
WP 4.8.25 ⛔ 8 znanych podatności
WP 4.8.24 ⛔ 11 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.23 ⛔ 13 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.22 ⛔ 17 znanych podatności
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.21 ⛔ 23 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.20 ⛔ 35 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.19 ⛔ 38 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.18 ⛔ 39 znanych podatności
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.17 ⛔ 44 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.16 ⛔ 45 znanych podatności
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.15 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.14 ⛔ 46 znanych podatności
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.13 ⛔ 51 znanych podatności
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.12 ⛔ 56 znanych podatności
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.11 ⛔ 60 znanych podatności
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.8.12
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.10 ⛔ 67 znanych podatności
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.8.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.8.12
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.8.13
CVE-2020-4050
WordPress < 5.4.2 - Misuse of set-screen-option Leading to Privilege Escalation
Naprawione w: WP 4.8.14
CVE-2020-25286
WordPress < 5.4.2 - Disclosure of Password-Protected Page/Post Comments
Naprawione w: WP 4.8.14
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.9 ⛔ 62 znanych podatności
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.8.10
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.8.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.8.12
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.8.13
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 4.8.8 ⛔ 64 znanych podatności
CVE-2019-8942
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution
Naprawione w: WP 5.0.1
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 4.8.10
CVE-2019-17671
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts
Naprawione w: WP 4.8.11
CVE-2019-17669
WordPress <= 5.2.3 - Server-Side Request Forgery (SSRF) in URL Validation
Naprawione w: WP 4.8.11
CVE-2019-20043
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
Naprawione w: WP 4.8.12
CVE-2019-20042
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
Naprawione w: WP 4.8.12
CVE-2019-16781
WordPress <= 5.3 - Authenticated Stored XSS via Block Editor Content
Naprawione w: WP 4.8.12
CVE-2020-11027
WordPress < 5.4.1 - Password Reset Tokens Failed to Be Properly Invalidated
Naprawione w: WP 4.8.13
CVE-2020-11025
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Naprawione w: WP 4.8.13
CVE-2020-11029
WordPress < 5.4.1 - Cross-Site Scripting (XSS) in wp-object-cache
Naprawione w: WP 4.8.13
CVE-2020-11026
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in File Uploads
Naprawione w: WP 4.8.13
CVE-2021-29450
WordPress 4.7-5.7 - Authenticated Password Protected Pages Exposure
Naprawione w: WP 4.8.16
CVE-2022-21663
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
Naprawione w: WP 4.8.18
CVE-2022-3590
WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding
Podatność
WP < 6.2.1 - Contributor+ Stored XSS via Open Embed Auto Discovery
Naprawione w: WP 4.8.22
Podatność
WordPress < 6.5.5 - Contributor+ Stored XSS in Template-Part Block
Naprawione w: WP 4.8.25
Podatność
WordPress < 6.5.5 - Contributor+ Path Traversal in Template-Part Block
Naprawione w: WP 4.8.25
WP 3.4.2 ⛔ 44 znanych podatności
CVE-2013-4339
WordPress 3.0 - 3.6 Crafted String URL Redirect Restriction Bypass
Naprawione w: WP 3.6.1
Podatność
Wordpress 3.4 - 3.5.1 /wp-admin/users.php Malformed s Parameter Path Disclosure
Naprawione w: WP 3.5.2
CVE-2013-0235
WordPress 1.5.1-3.5 - XML-RPC Pingback API Internal/External Port Scanning
Naprawione w: WP 3.5.1
CVE-2014-5204
WordPress 2.0.3 - 3.9.1 (except 3.7.4 / 3.8.4) CSRF Token Brute Forcing
Naprawione w: WP 3.9.2
CVE-2014-5240
WordPress 3.0 - 3.9.1 Authenticated Cross-Site Scripting (XSS) in Multisite
Naprawione w: WP 3.9.2
CVE-2014-9031
WordPress 3.0-3.9.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Naprawione w: WP 4.0
CVE-2015-5622
WordPress <= 4.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
Naprawione w: WP 4.2.3
CVE-2016-4029
WordPress <= 4.4.2 - SSRF Bypass using Octal & Hexedecimal IP addresses
Naprawione w: WP 4.5
CVE-2016-5837
WordPress 2.6.0-4.5.2 - Unauthorized Category Removal from Post
Naprawione w: WP 4.5.3
CVE-2016-7168
WordPress 2.5-4.6 - Authenticated Stored Cross-Site Scripting via Image Filename
Naprawione w: WP 4.6.1
CVE-2017-5488
WordPress 2.9-4.7 - Authenticated Cross-Site scripting (XSS) in update-core.php
Naprawione w: WP 4.7.1
CVE-2017-5490
WordPress 3.4-4.7 - Stored Cross-Site Scripting (XSS) via Theme Name fallback
Naprawione w: WP 4.7.1
CVE-2017-5491
WordPress <= 4.7 - Post via Email Checks mail.example.com by Default
Naprawione w: WP 4.7.1
CVE-2017-5492
WordPress 2.8-4.7 - Accessibility Mode Cross-Site Request Forgery (CSRF)
Naprawione w: WP 4.7.1
CVE-2017-5493
WordPress 3.0-4.7 - Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Naprawione w: WP 4.7.1
CVE-2017-6815
WordPress 2.8.1-4.7.2 - Control Characters in Redirect URL Validation
Naprawione w: WP 4.7.3
CVE-2017-9062
WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
Naprawione w: WP 4.7.5
CVE-2017-9065
WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks
Naprawione w: WP 4.7.5
CVE-2017-14723
WordPress 2.3.0-4.8.1 - $wpdb->prepare() potential SQL Injection
Naprawione w: WP 4.8.2
CVE-2018-12895
WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion
CVE-2019-16222
WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation
Naprawione w: WP 5.2.3
Nie chcesz sprawdzać tego ręcznie?
MonitorWWW.com sprawdza wersję Twojej strony automatycznie i wysyła alert e-mail, SMS lub Telegram, gdy pojawi się nowa krytyczna podatność.
Sprawdź plany i cennikChcesz wiedzieć więcej o tym, jak działa wykrywanie podatności? Przeczytaj artykuł: Krytyczne podatności WordPress (CVE).