Product by Wordpress Foundation

    Wordpress

    7 known vulnerabilities in Wordpress (Wordpress Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wordpress (Wordpress Foundation)
    HighCVE-2024-4439

    WordPress: Cross-Site Scripting (XSS)

    also in 2 other products

    		7.2
    MediumCVE-2023-2745

    WordPress Core < 6.2.1 - Directory Traversal

    also in 2 other products

    		5.4
    MediumCVE-2023-5692

    WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink

    		5.3
    MediumCVE-2026-114570

    WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit

    		4.9
    MediumCVE-2024-6307

    WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API

    also in 1 other product

    		6.4
    MediumCVE-2022-4973

    WordPress: Cross-site Scripting

    also in 1 other product

    		4.9
    MediumCVE-2026-3906

    WordPress: Missing Authorization

    		4.3

    All products by Wordpress Foundation