Database
WordPress Vulnerability Database (page 1472)
Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.
| Severity | Vulnerability | CVE | Installs | Published |
|---|---|---|---|---|
| Critical9.8 | Privilege Escalation | CVE-2006-4028 | — | |
| High8.8 | Remote Code Execution | CVE-2006-2667 | — | |
| Medium5.3 | IP Address Spoofing | CVE-2006-2702 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2007-5105 | — | |
| High7.5 | Sensitive Information Disclosure | CVE-2006-0986 | — | |
| High7.2 | Cross-Site Scripting | CVE-2006-0985 | — | |
| Medium6.1 | Reflected Cross-Site Scripting | CVE-2006-1263 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2006-1796 | — | |
| High7.2 | SQL Injection | CVE-2006-1012 | — | |
| Medium5.3 | Directory Traversal | CVE-2005-10002 | — | |
| High8.8 | Remote Code Execution | CVE-2005-2612 | — | |
| Medium5.3 | Arbitrary Email Content Change | CVE-2005-2109 | — | |
| High8.8 | SQL Injection | CVE-2005-2108 | — | |
| High7.3 | Sensitive Information Disclosure | CVE-2005-2110 | — | |
| High7.2 | Cross-Site Scripting | CVE-2005-2107 | — | |
| Medium6.4 | Stored Cross-Site Scripting | CVE-2005-1102 | — | |
| High8.8 | SQL Injection | CVE-2005-1810 | — | |
| Medium5.3 | Full Path Disclosure | CVE-2005-1688 | — | |
| High8.8 | SQL Injection | CVE-2005-1687 | — | |
| Medium5.3 | HTTP Response Splitting | CVE-2004-1584 | — | |
| Medium6.1 | Cross-Site Scripting | CVE-2004-1559 | — | |
| High8.8 | SQL Injection | CVE-2003-1598 | — | |
| Critical9.8 | Remote File Inclusion | CVE-2003-1599 | — |
- Critical9.8Privilege Escalation
WordPress
<2.0.4Update to 2.0.4
- High8.8Remote Code Execution
WordPress
≤2.0.2Update to 2.0.3
- Medium5.3IP Address Spoofing
WordPress
≤2.0.2Update to 2.0.3
- Medium6.1Cross-Site Scripting
WordPress
<2.0.2Update to 2.0.2
- High7.5Sensitive Information Disclosure
WordPress
≤2.0.1Update to 2.0.2
- High7.2Cross-Site Scripting
WordPress
≤2.0.1Update to 2.0.2
- Medium6.1Reflected Cross-Site Scripting
WordPress
<2.0.2Update to 2.0.2
- Medium6.1Cross-Site Scripting
WordPress
≤2.0Update to 2.0.1
- High7.2SQL Injection
WordPress
≤1.5.2Update to 2.0
- Medium5.3Directory Traversal
secure-files
≤1.1Update to 1.2
- High8.8Remote Code Execution
WordPress
≤1.5.1.3Update to 1.5.2
- Medium5.3Arbitrary Email Content Change
WordPress
≤1.5.1.2Update to 1.5.1.3
- High8.8SQL Injection
WordPress
<1.5.1.3Update to 1.5.1.3
- High7.3Sensitive Information Disclosure
WordPress
≤1.5.1.2Update to 1.5.1.3
- High7.2Cross-Site Scripting
WordPress
≤1.5.1.2Update to 1.5.1.3
- Medium6.4Stored Cross-Site Scripting
WordPress
≤1.5.1Update to 1.5.1.2
- High8.8SQL Injection
WordPress
≤1.5.1.1Update to 1.5.1.2
- Medium5.3Full Path Disclosure
WordPress
<1.5.1Update to 1.5.1
- High8.8SQL Injection
WordPress
<1.5.1Update to 1.5.1
- Medium5.3HTTP Response Splitting
WordPress
<1.2.1Update to 1.2.1
- Medium6.1Cross-Site Scripting
WordPress
<1.2Update to 1.2
- High8.8SQL Injection
WordPress
<0.72Update to 0.72
- Critical9.8Remote File Inclusion
WordPress
≤0.70Update to 0.71