Vendor

WordPress

39 known vulnerabilities.

Products

WordPress 18 wordpress-develop 17 Buddypress 1 Social-Share-Buttons 1 Requests 1 WordPress-Coding-Standards 1 Core 0

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low 3.7

CVE-2025-54352 Public exploit

WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RP…

WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu

Jul 21, 2025
Low 2.4

CVE-2020-4049

Authenticated self-XSS via theme uploads in WordPress

In affected versions of WordPress, when uploading themes, the name of the theme folder can be crafted in a way that could lead to JavaScript execution in /wp-admin on the themes page. This does require an admin to upload the theme, and is low severity self-XS…

WordPress wordpress-develop wordpress wordpress Web / CMS Debian Ubuntu

Jun 12, 2020
Low 3.5

CVE-2020-4050

set-screen-option filter misuse by plugins leading to privilege escalation in WordPress

In affected versions of WordPress, misuse of the `set-screen-option` filter's return value allows arbitrary user meta fields to be saved. It does require an admin to install a plugin that would misuse the filter. Once installed, it can be leveraged by low pri…

WordPress wordpress-develop wordpress wordpress Web / CMS Debian Ubuntu

Jun 12, 2020