Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system referred to within WordPress as Themes.

Official Site:

https://wordpress.org

Severity Summary:

Critical: 136 High: 508 Medium: 1729 Low: 18
Reference
Title
Severity
CVE-2018-19296
WordPress 4.1.x PHP Object Injection
Critical
CVE-2021-44223
WordPress Other Vulnerability
Critical
CVE-2022-21661
WordPress 5.1.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.2.x Multiple Vulnerabilities
Critical
CVE-2019-17670
WordPress Server-Side Request Forgery (SSRF) Vulnerability
Critical
CVE-2019-17669
WordPress Server-Side Request Forgery (SSRF) Vulnerability
Critical
CVE-2022-21661
WordPress 5.3.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.4.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.5.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.6.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.7.x Multiple Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.8.x Multiple Vulnerabilities
Critical
CVE-2016-10045
WordPress Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability
Critical
CVE-2008-4796
WordPress Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
Critical
CVE-2020-35539
WordPress Improper Input Validation Vulnerability
Critical
CVE-2022-21661
WordPress 4.9.x Multiple Vulnerabilities
Critical
CVE-2019-20041
WordPress Improper Input Validation Vulnerability
Critical
CVE-2008-4769
WordPress Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Critical
CVE-2020-36326
WordPress 3.7.x PHP Object Injection
Critical
CVE-2007-6013
WordPress Use of a Broken or Risky Cryptographic Algorithm Vulnerability
Critical
CVE-2018-19296
WordPress 3.7.x PHP Object Injection
Critical
CVE-2016-10033
WordPress Improper Neutralization of Argument Delimiters in a Command (Argument Injection) Vulnerability
Critical
CVE-2020-36326
WordPress 3.8.x PHP Object Injection
Critical
CVE-2018-19296
WordPress 3.8.x PHP Object Injection
Critical
CVE-2020-36326
WordPress 3.9.x PHP Object Injection
Critical
CVE-2018-19296
WordPress 3.9.x PHP Object Injection
Critical
CVE-2020-36326
WordPress 4.0.x PHP Object Injection
Critical
CVE-2009-2853
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities
Critical
CVE-2009-2854
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities
Critical
CVE-2022-21661
WordPress 5.0.x Multiple Vulnerabilities
Critical