Database

WordPress Vulnerability Database (page 1471)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1471)
Severity	Vulnerability	CVE	Installs	Published
High8.8	SQL Injection WordPress<2.1.3Update to 2.1.3	CVE-2007-1897	—	Apr 3, 2007
High7.2	Cross-Site Scripting WordPress≤2.0.9Update to 2.0.10	CVE-2008-0192	—	Apr 3, 2007
Medium6.4	Cross-Site Scripting WordPress≤2.1.2Update to 2.0.10 or 2.1.3	CVE-2007-1894	—	Apr 3, 2007
Medium6.1	Cross-Site Scripting WordPress≤2.1.1Update to 2.0.10 or 2.1.2	CVE-2007-1622	—	Apr 3, 2007
Medium6.1	Open Redirect WordPress<2.0.10Update to 2.0.10	CVE-2007-1599	—	Apr 3, 2007
Critical9.8	Backdoor WordPress2.2.1 – 2.2.1Update to 2.2.2	CVE-2007-1277	—	Mar 3, 2007
Critical9.8	Supply Chain Compromise WordPress2.1.1 – 2.1.1Update to 2.1.2	—	—	Mar 2, 2007
Medium6.4	Cross-Site Scripting WordPress≤2.1.1Update to 2.1.2	CVE-2007-1230	—	Mar 2, 2007
Medium6.4	Cross-Site Scripting WordPress≤2.1.1Update to 2.1.2	CVE-2007-1244	—	Mar 2, 2007
High7.2	Cross-Site Scripting WordPress≤2.1Update to 2.0.9 or 2.1.1	CVE-2007-1049	—	Feb 21, 2007
Medium6.4	Cross-Site Scripting WordPress≤3.0.4Update to 3.0.5	CVE-2011-0700	—	Feb 11, 2007
Medium6.5	Directory Traversal WordPress<2.1Update to 2.1	CVE-2007-0541	—	Jan 24, 2007
Medium4.3	Denial of Service WordPress<2.1Update to 2.1	CVE-2007-0539	—	Jan 22, 2007
Medium5.3	Full Path Disclosure WordPress≤2.0.11Update to 2.1	CVE-2008-0195	—	Jan 22, 2007
Medium5.3	Full Path Disclosure WordPress≤2.0.6Update to 2.0.7	CVE-2007-0262	—	Jan 15, 2007
High8.8	SQL Injection WordPress≤2.0.6Update to 2.0.7	CVE-2007-0233	—	Jan 15, 2007
Medium6.4	Cross-Site Scripting WordPress≤2.0.5Update to 2.0.6	CVE-2006-6808	—	Jan 5, 2007
Medium5.3	Username Enumeration via Error Messages WordPress≤2.0.5Update to 2.0.6	CVE-2007-0109	—	Jan 5, 2007
High8.8	Cross-Site Request Forgery to Cross-Site Scripting WordPress≤2.0.5Update to 2.0.6	CVE-2007-0106	—	Jan 5, 2007
Medium5.3	2.0.5 - Sensitive Information Disclosure WordPress2.0.2 – 2.0.5Update to 2.0.6	CVE-2006-4743	—	Jan 5, 2007
Critical9.8	SQL Injection WordPress≤2.0.5Update to 2.0.6	CVE-2007-0107	—	Jan 5, 2007
Medium6.5	Denial of Service WordPress≤2.0.4Update to 2.0.5	CVE-2006-6017	—	Oct 27, 2006
Medium6.5	Directory Traversal WordPress≤2.0.4Update to 2.0.5	CVE-2006-5705	—	Oct 27, 2006
Medium6.1	Cross-Site Scripting Headway<3.8.9Update to 3.8.9	CVE-2016-10953	—	Oct 13, 2006
Medium4.3	User Metadata Information Disclosure WordPress≤2.0.4Update to 2.0.5	CVE-2006-6016	—	Sep 18, 2006
Medium6.1	Reflected Cross-Site Scripting Subscribe to Comments≤2.0.7Update to 2.0.8	CVE-2006-10001	—	Sep 17, 2006
Medium5.5	Authenticated (Admin+) Directory Traversal Skippy WP-DB Backup (Legacy Core Plugin)≤1.7No patch available	CVE-2006-4208	—	Aug 14, 2006
Medium5.3	Full Path Disclosure WordPress<1.5.2Update to 1.5.2	CVE-2005-4463	—	Aug 14, 2006
Medium5.3	Full Path Disclosure WordPress≤2.0.3Update to 2.0.4	CVE-2006-3390	—	Jul 29, 2006
Medium6.5	Denial of Service WordPress≤2.0.3Update to 2.0.4	CVE-2008-0194	—	Jul 29, 2006

High8.8
SQL Injection
WordPress
<2.1.3Update to 2.1.3
CVE-2007-1897Apr 3, 2007
High7.2
Cross-Site Scripting
WordPress
≤2.0.9Update to 2.0.10
CVE-2008-0192Apr 3, 2007
Medium6.4
Cross-Site Scripting
WordPress
≤2.1.2Update to 2.0.10 or 2.1.3
CVE-2007-1894Apr 3, 2007
Medium6.1
Cross-Site Scripting
WordPress
≤2.1.1Update to 2.0.10 or 2.1.2
CVE-2007-1622Apr 3, 2007
Medium6.1
Open Redirect
WordPress
<2.0.10Update to 2.0.10
CVE-2007-1599Apr 3, 2007
Critical9.8
Backdoor
WordPress
2.2.1 – 2.2.1Update to 2.2.2
CVE-2007-1277Mar 3, 2007
Critical9.8
Supply Chain Compromise
WordPress
2.1.1 – 2.1.1Update to 2.1.2
6711f542-8b75-4968-86ac-9686ded775b7Mar 2, 2007
Medium6.4
Cross-Site Scripting
WordPress
≤2.1.1Update to 2.1.2
CVE-2007-1230Mar 2, 2007
Medium6.4
Cross-Site Scripting
WordPress
≤2.1.1Update to 2.1.2
CVE-2007-1244Mar 2, 2007
High7.2
Cross-Site Scripting
WordPress
≤2.1Update to 2.0.9 or 2.1.1
CVE-2007-1049Feb 21, 2007
Medium6.4
Cross-Site Scripting
WordPress
≤3.0.4Update to 3.0.5
CVE-2011-0700Feb 11, 2007
Medium6.5
Directory Traversal
WordPress
<2.1Update to 2.1
CVE-2007-0541Jan 24, 2007
Medium4.3
Denial of Service
WordPress
<2.1Update to 2.1
CVE-2007-0539Jan 22, 2007
Medium5.3
Full Path Disclosure
WordPress
≤2.0.11Update to 2.1
CVE-2008-0195Jan 22, 2007
Medium5.3
Full Path Disclosure
WordPress
≤2.0.6Update to 2.0.7
CVE-2007-0262Jan 15, 2007
High8.8
SQL Injection
WordPress
≤2.0.6Update to 2.0.7
CVE-2007-0233Jan 15, 2007
Medium6.4
Cross-Site Scripting
WordPress
≤2.0.5Update to 2.0.6
CVE-2006-6808Jan 5, 2007
Medium5.3
Username Enumeration via Error Messages
WordPress
≤2.0.5Update to 2.0.6
CVE-2007-0109Jan 5, 2007
High8.8
Cross-Site Request Forgery to Cross-Site Scripting
WordPress
≤2.0.5Update to 2.0.6
CVE-2007-0106Jan 5, 2007
Medium5.3
2.0.5 - Sensitive Information Disclosure
WordPress
2.0.2 – 2.0.5Update to 2.0.6
CVE-2006-4743Jan 5, 2007
Critical9.8
SQL Injection
WordPress
≤2.0.5Update to 2.0.6
CVE-2007-0107Jan 5, 2007
Medium6.5
Denial of Service
WordPress
≤2.0.4Update to 2.0.5
CVE-2006-6017Oct 27, 2006
Medium6.5
Directory Traversal
WordPress
≤2.0.4Update to 2.0.5
CVE-2006-5705Oct 27, 2006
Medium6.1
Cross-Site Scripting
Headway
<3.8.9Update to 3.8.9
CVE-2016-10953Oct 13, 2006
Medium4.3
User Metadata Information Disclosure
WordPress
≤2.0.4Update to 2.0.5
CVE-2006-6016Sep 18, 2006
Medium6.1
Reflected Cross-Site Scripting
Subscribe to Comments
≤2.0.7Update to 2.0.8
CVE-2006-10001Sep 17, 2006
Medium5.5
Authenticated (Admin+) Directory Traversal
Skippy WP-DB Backup (Legacy Core Plugin)
≤1.7No patch available
CVE-2006-4208Aug 14, 2006
Medium5.3
Full Path Disclosure
WordPress
<1.5.2Update to 1.5.2
CVE-2005-4463Aug 14, 2006
Medium5.3
Full Path Disclosure
WordPress
≤2.0.3Update to 2.0.4
CVE-2006-3390Jul 29, 2006
Medium6.5
Denial of Service
WordPress
≤2.0.3Update to 2.0.4
CVE-2008-0194Jul 29, 2006