Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system referred to within WordPress as Themes.

Official Site:

https://wordpress.org

Severity Summary:

Critical: 138 High: 509 Medium: 1730 Low: 18
Reference
Title
Severity
CVE-2026-60137
Facilitated SQL injection vulnerability in the author__not_in parameter of WP_Query
Critical
CVE-2020-35539
WordPress Improper Input Validation Vulnerability
Critical
CVE-2008-4769
WordPress Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Critical
CVE-2018-19296
WordPress 5.6.x PHP Object Injection
Critical
CVE-2020-36326
WordPress 5.7.x PHP Object Injection
Critical
CVE-2018-19296
WordPress 5.7.x PHP Object Injection
Critical
CVE-2022-21661
WordPress 5.8.x Multiple Vulnerabilities
Critical
CVE-2019-20041
WordPress Improper Input Validation Vulnerability
Critical
CVE-2022-21661
WordPress 5.7.x Multiple Vulnerabilities
Critical
CVE-2016-10033
WordPress Improper Neutralization of Argument Delimiters in a Command (Argument Injection) Vulnerability
Critical
CVE-2021-44223
WordPress Other Vulnerability
Critical
CVE-2008-4796
WordPress Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
Critical
CVE-2016-10045
WordPress Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability
Critical
CVE-2022-21661
WordPress 5.6.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.5.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.4.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.3.x Multiple Vulnerabilities
Critical
CVE-2007-6013
WordPress Use of a Broken or Risky Cryptographic Algorithm Vulnerability
Critical
CVE-2020-36326
WordPress 3.7.x PHP Object Injection
Critical
CVE-2022-21661
WordPress 5.1.x Multiple Vulnerabilities
Critical
CVE-2020-28035
WordPress Improper Privilege Management Vulnerability
Critical
CVE-2018-19296
WordPress 4.0.x PHP Object Injection
Critical
CVE-2008-5695
WordPress wp-admin/options.php Remote Code Execution Vulnerability
Critical
CVE-2020-28039
WordPress Vulnerability
Critical
CVE-2005-1810
WordPress cat Parameter SQL Injection Vulnerability
Critical
CVE-2020-28037
WordPress Improper Input Validation Vulnerability
Critical
CVE-2020-28036
WordPress Improper Privilege Management Vulnerability
Critical
CVE-2020-36326
WordPress 4.0.x PHP Object Injection
Critical
CVE-2018-19296
WordPress 3.7.x PHP Object Injection
Critical
CVE-2018-19296
WordPress 3.9.x PHP Object Injection
Critical