Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system referred to within WordPress as Themes.

Official Site:

https://wordpress.org

Severity Summary:

Critical: 136 High: 508 Medium: 1729 Low: 18
Reference
Title
Severity
CVE-2016-1564
WordPress 4.2.x Cross-Site Scripting Vulnerability
Medium
CVE-2016-1564
WordPress 4.3.x Cross-Site Scripting Vulnerability
Medium
CVE-2016-1564
WordPress 4.4 Cross-Site Scripting Vulnerability
Medium
CVE-2015-7989
WordPress 4.3 Multiple Vulnerabilities
Medium
CVE-2015-5715
WordPress 4.3 Multiple Vulnerabilities
Medium
CVE-2015-5714
WordPress 4.3 Multiple Vulnerabilities
Medium
CVE-2015-5734
WordPress 4.2.3 Multiple Vulnerabilities
Medium
CVE-2015-5733
WordPress 4.2.3 Multiple Vulnerabilities
Medium
CVE-2015-5732
WordPress 4.2.3 Multiple Vulnerabilities
Medium
CVE-2012-2404
WordPress 3.3.1 Multiple Vulnerabilities
Medium
CVE-2012-2402
WordPress 3.3.1 Multiple Vulnerabilities
Medium
CVE-2016-2222
WordPress 3.8.x Multiple Vulnerabilities
Medium
No CVE number
WordPress index.php Cross-Site Scripting Vulnerability
Medium
CVE-2011-5270
WordPress press-this.php Remote Security Bypass Vulnerability
Medium
CVE-2008-4671
WordPress MU wp-admin/wpmu-blogs.php Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2009-1030
WordPress MU wp-includes/wpmu-functions.php Cross-Site Scripting Vulnerability
Medium
CVE-2007-3238
WordPress 2.2 Cross-Site Scripting Vulnerability
Medium
CVE-2010-4536
WordPress 3.0.3 KSES Library Cross-Site Scripting Vulnerability
Medium
No CVE number
WordPress Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2004-1584
WordPress wp-login.php HTTP Response Splitting Vulnerability
Medium
No CVE number
WordPress edit.php Cross-Site Scripting Vulnerability
Medium
No CVE number
WordPress post.php Cross-Site Scripting Vulnerability
Medium
CVE-2006-0733
WordPress Comment Post Cross-Site Scripting Vulnerability
Medium
CVE-2006-1796
WordPress Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2006-0985
WordPress Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2007-0106
WordPress 2.0.5 Invalid CSRF Token Cross-Site Scripting Vulnerability
Medium
CVE-2011-3127
WordPress Clickjacking Vulnerability
Medium
CVE-2006-6808
WordPress 2.0.5 Cross-Site Scripting Vulnerability
Medium
CVE-2007-1049
WordPress templates.php Cross-Site Scripting Vulnerability
Medium
CVE-2007-1244
WordPress 2.1.1 Cross-Site Scripting Vulnerability
Medium