WordPress.org WordPress vulnerabilities

5 published CVEs name WordPress.org WordPress among the affected products.

Critical 0High 0Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2023-39999
WordPress < 6.3.2 is vulnerable to Broken Access Control
WordPress.org · WordPress
Medium4.3
CVE-2023-38000
Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block
WordPress.org · WordPress
Medium6.5
CVE-2022-43504
Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who…
WordPress.org · WordPress
Medium5.3
CVE-2022-43500
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer…
WordPress.org · WordPress
Medium6.1
CVE-2022-43497
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer…
WordPress.org · WordPress
Medium6.1