WO
CMS
WordPress
On CISA KEVExploited in the wild
369
CVEs
7
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 20High 48Medium 105Low 3
Watch
Add WordPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29450 | 4.3 | Apr 15 | Wordpress is an open source CMS Affected: 4.7 before 5.7.1 |
| CVE-2020-28040 | 4.3 | Nov 2 | WordPress before 5.5.2 allows CSRF attacks that change a theme's background image Affected: before 5.5.2 |
| CVE-2019-20043 | 4.3 | Dec 27 | In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to… Affected: 3.7 before 5.3.1 |
| CVE-2016-10148 | 4.3 | Jan 18 | The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which… Affected: through 4.5.5 |
| CVE-2015-5715 | 4.3 | May 22 | The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access… Affected: through 4.3.0 |