Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system referred to within WordPress as Themes.

Official Site:

https://wordpress.org

Severity Summary:

Critical: 138 High: 511 Medium: 1730 Low: 18
Reference
Title
Severity
CVE-2018-20148
WordPress Deserialization of Untrusted Data Vulnerability
Critical
CVE-2017-16510
WordPress Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2017-14723
WordPress Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2017-5611
WordPress Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2020-28039
WordPress Vulnerability
Critical
CVE-2020-28037
WordPress Improper Input Validation Vulnerability
Critical
CVE-2020-28036
WordPress Improper Privilege Management Vulnerability
Critical
CVE-2020-28035
WordPress Improper Privilege Management Vulnerability
Critical
CVE-2020-28032
WordPress Deserialization of Untrusted Data Vulnerability
Critical
CVE-2012-2400
WordPress Vulnerability
Critical
CVE-2012-2399
WordPress Vulnerability
Critical
CVE-2011-3129
WordPress Permissions Privileges and Access Controls Vulnerability
Critical
CVE-2011-3125
WordPress Vulnerability
Critical
CVE-2011-3122
WordPress Vulnerability
Critical
CVE-2009-2853
WordPress Permissions Privileges and Access Controls Vulnerability
Critical
CVE-2008-6767
WordPress Vulnerability
Critical
CVE-2008-2392
WordPress Improper Input Validation Vulnerability
Critical
CVE-2006-4028
WordPress Vulnerability
Critical
CVE-2020-36326
WordPress Deserialization of Untrusted Data Vulnerability
Critical
CVE-2019-17670
WordPress Server-Side Request Forgery (SSRF) Vulnerability
Critical
CVE-2019-17669
WordPress Server-Side Request Forgery (SSRF) Vulnerability
Critical
CVE-2016-10045
WordPress Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability
Critical
CVE-2008-4796
WordPress Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
Critical
CVE-2021-44223
WordPress Other Vulnerability
Critical
CVE-2020-35539
WordPress Improper Input Validation Vulnerability
Critical
CVE-2019-20041
WordPress Improper Input Validation Vulnerability
Critical
CVE-2008-4769
WordPress Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Critical
CVE-2007-6013
WordPress Use of a Broken or Risky Cryptographic Algorithm Vulnerability
Critical
CVE-2016-10033
WordPress Improper Neutralization of Argument Delimiters in a Command (Argument Injection) Vulnerability
Critical
CVE-2009-2853
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities
Critical