Vulnerabilities > Wordpress
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-09-09 | CVE-2021-39202 | Unspecified vulnerability in Wordpress 5.8 WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. | 5.4 |
| 2021-09-09 | CVE-2021-39203 | Unspecified vulnerability in Wordpress 5.8 WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. | 6.5 |
| 2021-04-28 | CVE-2020-36326 | Deserialization of Untrusted Data vulnerability in multiple products PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname. | 9.8 |
| 2021-04-27 | CVE-2021-29476 | Unspecified vulnerability in Wordpress Requests 1.6.0/1.6.1/1.7.0 Requests is a HTTP library written in PHP. | 9.8 |
| 2021-04-15 | CVE-2021-29450 | Wordpress is an open source CMS. | 4.3 |
| 2021-04-15 | CVE-2021-29447 | Wordpress is an open source CMS. | 6.5 |
| 2020-11-02 | CVE-2020-28040 | Cross-Site Request Forgery (CSRF) vulnerability in multiple products WordPress before 5.5.2 allows CSRF attacks that change a theme's background image. | 4.3 |
| 2020-11-02 | CVE-2020-28039 | is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion because it does not properly determine whether a meta key is considered protected. | 9.1 |
| 2020-11-02 | CVE-2020-28038 | Cross-site Scripting vulnerability in multiple products WordPress before 5.5.2 allows stored XSS via post slugs. | 6.1 |
| 2020-11-02 | CVE-2020-28037 | Improper Check for Unusual or Exceptional Conditions vulnerability in multiple products is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a new installation, leading to remote code execution (as well as a denial of service for the old installation). | 9.8 |