Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system referred to within WordPress as Themes.

Official Site:

https://wordpress.org

Severity Summary:

Critical: 136 High: 508 Medium: 1729 Low: 18
Reference
Title
Severity
CVE-2023-38000
WordPress 4.7.x Multiple Vulnerabilities
High
CVE-2013-4339
WordPress Improper Input Validation Vulnerability
High
CVE-2023-5561
WordPress 4.7.x Multiple Vulnerabilities
High
CVE-2023-39999
WordPress 4.8.x Multiple Vulnerabilities
High
CVE-2023-38000
WordPress 4.8.x Multiple Vulnerabilities
High
CVE-2023-5561
WordPress 4.8.x Multiple Vulnerabilities
High
CVE-2023-39999
WordPress 4.9.x Multiple Vulnerabilities
High
CVE-2023-38000
WordPress 4.9.x Multiple Vulnerabilities
High
CVE-2023-5561
WordPress 4.9.x Multiple Vulnerabilities
High
CVE-2023-5561
WordPress 5.5.x Multiple Vulnerabilities
High
CVE-2023-38000
WordPress 5.6.x Multiple Vulnerabilities
High
CVE-2023-38000
WordPress 4.4.x Multiple Vulnerabilities
High
CVE-2008-2146
WordPress Permissions Privileges and Access Controls Vulnerability
High
CVE-2023-39999
WordPress 6.3.x Multiple Vulnerabilities
High
CVE-2023-38000
WordPress 6.3.x Multiple Vulnerabilities
High
CVE-2023-5561
WordPress 6.3.x Multiple Vulnerabilities
High
CVE-2009-2762
WordPress Credentials Management Errors Vulnerability
High
CVE-2008-4625
WordPress Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2008-3747
WordPress Permissions Privileges and Access Controls Vulnerability
High
CVE-2008-1930
WordPress Improper Authentication Vulnerability
High
CVE-2023-38000
WordPress 6.2.x Multiple Vulnerabilities
High
CVE-2005-2108
WordPress 1.5.1.2 Multiple Vulnerabilities
High
CVE-2008-0491
WordPress Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2008-0194
WordPress Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
No CVE number
WordPress 3.7.x Multiple Vulnerabilities
High
No CVE number
WordPress 3.8.x Multiple Vulnerabilities
High
No CVE number
WordPress 3.9.x Multiple Vulnerabilities
High
No CVE number
WordPress 4.0.x Multiple Vulnerabilities
High
CVE-2023-5561
WordPress 6.2.x Multiple Vulnerabilities
High
CVE-2023-39999
WordPress 6.2.x Multiple Vulnerabilities
High