WordPress vulnerabilities
39 CVEs and advisories name WordPress as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-4046Authenticated XSS through embed block in WordPress
- CVE-2020-11026Specially crafted filenames in WordPress leading to XSS
- CVE-2020-11028Unauthenticated disclosure of certain private posts in WordPress
- CVE-2020-11029Cross-site scripting in stats method (object cache) in WordPress
- CVE-2020-11030Cross-site scripting (XSS) in Search block in WordPress
- CVE-2020-11025Authenticated cross-site scripting (XSS) in WordPress Customizer
- CVE-2020-11027Password reset links invalidation issue in WordPress
- CVE-2019-16781Stored cross-site scripting (XSS) in WordPress block editor
- CVE-2019-16780Stored cross-site scripting (XSS) in WordPress block editor