WordPress wordpress-develop vulnerabilities

CVEs per yearBy the year they were published

1. 20205
2. 20216
3. 20224
4. 20242

Newest CVEs

• CVE-2024-31211

  Remote Code Execution in `WP_HTML_Token`

  WordPress · wordpress-develop

  Medium5.5
• CVE-2024-31210

  PHP file upload bypass via Plugin installer

  WordPress · wordpress-develop

  High7.7
• CVE-2022-21662

  Stored XSS in WordPress

  WordPress · wordpress-develop

  High8.0
• CVE-2022-21663

  Authenticated Object Injection in Multisites in WordPress

  WordPress · wordpress-develop

  Medium6.6
• CVE-2022-21664

  SQL injection in WordPress

  WordPress · wordpress-develop

  High7.4
• CVE-2022-21661

  SQL injection in WordPress

  WordPress · wordpress-develop

  High8.0
• CVE-2021-39203

  Private data disclosure/privilege escalation through the block editor in Wordpress

  WordPress · wordpress-develop

  Medium6.8
• CVE-2021-39202

  WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget

  WordPress · wordpress-develop

  High7.6
• CVE-2021-39201

  Authenticated cross-site scripting (XSS) in WordPress editor

  WordPress · wordpress-develop

  High7.6
• CVE-2021-39200

  Information Disclosure in wp_die() via JSONP in wordpress

  WordPress · wordpress-develop

  Medium5.3