https://wordsec.net/vulnerabilities/core/3.3/wordpress-core-33-cross-site-scripting 2012-01-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-583-sql-injection-via-wp_meta_query 2022-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-492-authenticated-cross-site-scripting 2018-01-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-602-authenticated-sql-injection 2022-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-475-stored-cross-site-scripting-via-filenames 2017-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.3/wordpress-core-23-cross-site-scripting 2007-10-26T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-cross-site-scripting-via-css 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-type-confusion 2019-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/0.72/wordpress-core-072-sql-injection 2003-10-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-hash-collision 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-202-sensitive-information-disclosure 2006-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-authenticated-cross-site-scripting-in-youtube-url-embeds 2017-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.2/wordpress-core-221-arbitrary-file-upload 2007-08-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-wordpress-mu-281-username-enumeration 2009-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-452-cross-site-scripting-via-mediaelementjs 2016-05-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.8/wordpress-core-382-sql-injection 2014-04-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.5/wordpress-core-251-authentication-bypass 2008-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.4/wordpress-core-643-authenticatedadministrator-php-file-upload 2018-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.3/wordpress-core-332-sensitive-information-disclosure 2012-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-491-reflected-cross-site-scripting 2017-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-582-ca-bundlecrt-contains-expired-certificate-dst-root-ca-x3 2021-11-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.7/wordpress-mu-27-cross-site-scripting 2009-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.2/wordpress-core-621-cross-site-request-forgery 2023-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.9/wordpress-core-59-591-authenticated-contributor-stored-cross-site-scripting 2022-03-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-bypass-url-validation 2017-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-303-access-control-bypass 2010-12-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.6/wordpress-core-461-authenticated-directory-traversal-to-arbitrary-file-access 2016-09-07T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-45-cross-site-request-forgery-via-wp_ajax_wp_compression_test 2016-03-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-shared-user-instance-weakness 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-revision-history-disclosure 2016-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-1513-sql-injection 2005-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-302-spam-protection-bypass 2010-11-30T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-283-missing-authorization 2009-08-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.4/wordpress-core-442-server-side-request-forgery 2016-02-02T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.4/wordpress-core-342-missing-authorization-checks-on-create_post 2012-09-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-531-authenticated-stored-cross-site-scripting 2019-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-weak-multi-site-activation-key-for-user-and-site-signup 2017-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-204-full-path-disclosure 2006-07-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-cross-site-scripting-via-customizer 2016-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-denial-of-service-via-oembed-protocol 2016-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-open-redirect 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.3/wordpress-core-331-same-origin-policy-bypass 2012-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-391-xml-external-entity-xxe-weakness 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/7.0/wordpress-core-69-701-remote-code-execution-via-rest-api-batch-request-route-confusion 2026-07-17T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-531-authenticated-stored-cross-site-scripting 2019-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-15-stored-cross-site-scripting 2005-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-204-cross-site-scripting 2007-09-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-50-denial-of-service 2018-02-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-206-username-enumeration-via-error-messages 2007-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-phar-unserialization 2018-09-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-632-authenticated-subscriber-arbitrary-shortcode-execution-via-parse-media-shortcode 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.6/wordpress-mu-26-cross-site-scripting 2008-09-01T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-cache-poisoning 2019-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-301-missing-authorization 2010-07-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-stored-cross-site-scripting-via-accessibility-helper-title 2015-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-304-cross-site-scripting 2007-02-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-45-cross-site-scripting-via-network-settings-page 2016-04-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-472-arbitrary-page-modification 2017-01-26T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.3/wordpress-core-431-authenticated-cross-site-scripting 2015-09-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-55-unauthorized-password-reset-via-interception 2017-05-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-452-cross-site-scripting-via-pluploadflashswf 2016-05-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.2/wordpress-core-222-cross-site-scripting 2007-08-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-305-improper-authorization-to-information-disclosure 2011-02-07T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-222-open-redirect 2007-08-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.6/wordpress-core-27-denial-of-service 2008-12-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-213-authorization-bypass 2007-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-php-object-injection 2018-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.5/wordpress-core-655-authenticated-contributor-stored-cross-site-scripting-via-template-part-block 2024-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-303-cross-site-scripting 2010-12-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-204-privilege-escalation 2006-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.3/wordpress-core-232-sql-injection 2007-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-information-disclosure 2017-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-cross-site-scripting-via-media-uploads 2019-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-313-media-related-security-issue 2011-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.6/wordpress-core-461-authenticated-stored-cross-site-scripting 2016-09-07T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-stored-cross-site-scripting-via-plugin-names 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-server-side-request-forgery 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-information-disclosure-multi-part-email-leak 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-602-stored-cross-site-scripting-via-plugin-deactivation-and-deletion-errors 2022-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-475-cross-site-request-forgery-filesystem-credential-update 2017-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-authenticated-author-cross-site-scripting-via-file-uploads 2020-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.4/wordpress-core-25-full-path-disclosure 2007-12-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.6/wordpress-core-261-cryptographic-weakness 2008-08-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.4/wordpress-core-342-missing-authorization-checks 2012-09-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.6/wordpress-core-262-arbitrary-user-password-reset 2008-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-1512-cross-site-scripting 2005-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-privilege-escalation-via-xml-rpc 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-542-authenticated-stored-cross-site-scripting 2020-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.3/wordpress-core-232-cross-site-scripting 2008-02-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-205-cross-site-request-forgery-to-cross-site-scripting 2007-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-reflected-cross-site-scripting 2019-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-authenticated-admin-stored-cross-site-scripting-via-customizer 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.5/wordpress-core-233-directory-traversal 2008-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-470-631-sensitive-information-exposure-via-user-search-rest-endpoint 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.3/wordpress-core-431-authorization-bypass-to-information-disclosure 2015-09-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-cross-site-request-forgery-protection-bypass 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-40-missing-session-cookie-expiration 2012-12-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-151-full-path-disclosure 2005-05-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.1/wordpress-core-412-cross-site-scripting 2015-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.9/wordpress-691-missing-authorization-to-authenticated-author-sensitive-information-disclosure-via-query-attachments-ajax-endpoint 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-292-and-304-sensitive-information-disclosure 2011-01-28T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-cross-site-scripting-via-media-metadata 2017-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-reflected-cross-site-scripting-via-global-variables 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-stored-cross-site-scripting-via-comments-via-urls 2019-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-302-cross-site-scripting 2010-11-30T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-gutenberg-1431-authenticated-cross-site-scripting-in-various-blocks 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-authenticated-information-disclosure-via-rest-api 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-denial-of-service-via-long-password 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.9/wordpress-core-292-authorization-bypass 2010-02-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.6/wordpress-core-361-open-redirect 2013-09-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.5/wordpress-core-25-cross-site-scripting 2008-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-31-cross-site-scripting 2011-04-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.5/wordpress-core-655-authenticated-contributor-directory-traversal 2024-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-denial-of-service-via-xml 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-open-redirect 2019-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.3/wordpress-core-431-cross-site-scripting-via-shortcodes 2015-09-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-423-authenticated-contributor-stored-cross-site-scripting-via-shortcode 2015-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.9/wordpress-691-unauthenticated-blind-server-side-request-forgery-via-xml-rpc-pingback-discovery 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-205-cross-site-scripting 2007-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-stored-cross-site-scripting-via-file-uploads 2018-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.2/wordpress-core-622-shortcode-execution-in-user-generated-content 2023-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.5/wordpress-core-251-arbitrary-file-upload 2008-04-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.3/wordpress-core-331-cross-site-scripting 2012-04-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-313-security-hardening 2011-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-remote-code-execution 2019-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-28-sensitive-information-disclosure 2009-07-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-581-lodash-update 2021-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-202-cross-site-scripting 2006-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.9/wordpress-691-authenticated-administrator-stored-cross-site-scripting-via-navigation-menu-items 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/twenty-fifteen-theme-11-wordpress-core-422-cross-site-scripting-via-examplehtml 2015-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-cross-site-request-forgery-via-press-this 2017-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-301-sql-injection 2010-11-30T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-deserialization-gadget 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-503-path-traversal-and-local-file-inclusion 2019-02-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-152-full-path-disclosure 2006-08-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-531-authorization-bypass 2019-12-01T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.6/wordpress-core-361-html-file-upload 2013-09-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.3/wordpress-core-332-cross-site-scripting 2012-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.2/wordpress-core-621-shortcode-execution-in-user-generated-content 2023-05-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-553-php-object-injection-gadget 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.1/wordpress-core-412-cross-site-scripting-via-ephox-in-plupload 2015-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-authenticated-cross-site-scripting-via-post-previews 2019-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-21-full-path-disclosure 2007-01-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-221-cross-site-scripting 2007-08-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-306-incorrect-authorization-checks 2011-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-xxe-injection 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-213-sql-injection 2007-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-59-631-authenticatedcontributor-stored-cross-site-scripting-via-navigation-attributes 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-211-supply-chain-compromise 2007-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-cross-site-scripting-in-the-block-editor 2020-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.8/wordpress-core-382-contributor-users-can-publish-posts 2014-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-authenticated-stored-cross-site-scripting-via-customizer 2019-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-423-authorization-bypass 2015-07-23T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-sql-injection-via-mishandled-placeholders 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-631-authenticatedcontributor-sensitive-information-exposure-via-comments-on-protected-posts 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-authorization-bypass 2019-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.4/wordpress-core-643-sensitive-information-exposure-via-redirect_guess_404_permalink 2024-04-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-reflected-cross-site-scripting-via-sql-injection 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-203-denial-of-service 2006-07-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-495-security-misconfiguration-with-url-hostnames 2018-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-cross-site-scripting-via-shortcode-brackets 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.7/wordpress-core-58-dependency-confusion 2021-11-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-203-ip-address-spoofing 2006-06-01T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-password-reset-link-non-expiration 2020-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.9/wordpress-691-cross-site-scripting-via-client-side-template-override-in-admin-area 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-491-cross-domain-flash-injection 2017-10-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-313-username-enumeration 2011-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-491-authorization-bypass 2017-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-open-redirect-in-admin-dashboard 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.4/wordpress-core-342-cross-site-scripting 2012-09-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-1512-sql-injection 2005-05-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-531-stored-cross-site-scripting-via-block-editor 2019-12-13T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-wordpress-mu-281-full-path-disclosure 2009-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-cross-site-request-forgery-to-password-reset 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-54-58-sensitive-information-disclosure 2021-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-472-authorization-bypass-to-term-disclosure 2017-01-26T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-reflected-cross-site-scripting 2020-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-arbitrary-file-deletion 2018-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-cross-site-request-forgery-to-theme-image-change 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-422-cross-site-scripting-via-comments 2015-05-07T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-content-spoofing-attacks 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-475-authorization-bypass-allowing-post-meta-updates 2017-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-542-comment-disclosure 2020-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-cross-site-scripting-via-multiple-vectors 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-cross-site-request-forgery-to-post-lockage 2015-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-284-denial-of-service 2009-10-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.2/wordpress-core-621-insufficient-sanitization-of-block-attributes 2023-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-204-directory-traversal 2006-10-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.6/wordpress-core-453-denial-of-service 2016-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-authenticated-cross-site-scripting-via-avatar-url 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-cross-site-scripting 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-312-arbitrary-file-upload 2011-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-312-sql-injection 2011-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-542-arbitrary-user-meta-update 2020-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-authenticated-stored-cross-site-scripting-via-comments 2018-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.4/wordpress-core-441-cross-site-scripting-via-theme-names 2016-01-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.3/wordpress-core-233-wordpress-mu-132-remote-code-execution 2007-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-152-sql-injection 2005-12-31T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-directory-traversal-during-unzip 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-472-path-disclosure 2017-01-01T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-stored-cross-site-scripting-via-post-slugs 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-201-cross-site-scripting 2006-01-31T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-472-authenticated-sql-injection 2017-01-26T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-221-authenticated-admin-cross-site-scripting 2007-08-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-205-user-metadata-information-disclosure 2006-09-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-cross-site-request-forgery-via-widget-editing 2017-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-542-self-cross-site-scripting-via-theme-folder-name 2020-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.3/wordpress-core-233-improper-authorization-checks 2007-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-21-denial-of-service 2007-01-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.9/wordpress-core-592-gutenberg-1272-prototype-pollution-via-block-editor 2022-03-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-49-insecure-deserialization 2018-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-timing-side-channel-attack 2015-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-cross-site-scripting-via-taxonomy-names 2017-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-deserialization-via-widgets 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-283-authorization-bypass 2009-08-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.7/wordpress-core-571-xxe-injection 2021-04-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-server-side-request-forgery 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-2010-open-redirect 2007-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-285-cross-site-scripting 2009-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.0/wordpress-core-302-missing-authorization 2010-12-30T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.8/wordpress-682-authenticated-contributor-sensitive-information-exposure 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-473-arbitrary-file-deletion 2017-03-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.1/wordpress-core-511-cross-site-request-forgery-to-cross-site-scripting-via-comments 2019-04-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-56-631-reflected-cross-site-scripting-via-application-password-requests 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.7/wordpress-core-571-sensitive-information-disclosure 2021-04-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.2/wordpress-core-223-wordpress-mu-125a-sql-injection 2007-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-223-restriction-bypass 2007-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-212-cross-site-scripting 2007-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.9/wordpress-69-691-missing-authorization-to-authenticated-subscriber-arbitrary-note-creation-via-rest-api 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-bypass-sanitize_file_name-protection 2016-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-211-cross-site-scripting 2007-03-02T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-cross-site-scripting-via-attachment-name 2016-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.8/wordpress-core-382-authentication-cookie-forgery 2014-04-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.9/wordpress-691-authenticated-author-xml-external-entity-injection-via-getid3-library-media-upload 2026-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-491-stored-cross-site-scripting-via-language 2017-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-stored-cross-site-scripting 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-472-cross-site-scripting 2017-01-26T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-cross-site-scripting-via-widget-title 2015-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-22-arbitrary-file-upload 2007-08-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-brute-force-of-cross-site-request-forgery-tokens 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-authenticated-cross-site-scripting-via-customizer 2020-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.6/wordpress-core-361-swf-and-exe-file-upload 2013-09-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.6/wordpress-core-361-spoof-post-authorship 2013-09-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-63-631-authenticatedcontributor-cross-site-scripting-via-footnotes-block 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-392-denial-of-service-via-xml-2 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-583-sql-injection-via-wp_query 2021-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-misconfiguration-that-allows-trigger-of-new-installation 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-207-full-path-disclosure 2007-01-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-209-cross-site-scripting 2007-02-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.4/wordpress-core-640-641-remote-code-execution-pop-chain 2023-12-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-602-authenticated-contributor-stored-cross-site-scripting-via-use-of-the_meta-function 2022-08-30T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.4/wordpress-core-44-brute-force-password-recovery-tokens 2015-02-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-583-super-admin-multi-site-installation-object-injection 2022-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-cross-site-scripting-via-shortcodes 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.4/wordpress-core-541-private-post-disclosure 2020-04-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.9/wordpress-core-401-cross-site-request-forgery-to-authentication-takeover 2014-08-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-54-58-authenticated-stored-cross-site-scripting 2021-09-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-483-sql-injection-due-to-double-prepare-approach 2017-10-31T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.2/wordpress-core-621-authenticated-contributor-stored-cross-site-scripting-via-embed-discovery 2023-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-directory-traversal-via-customizer 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.5/wordpress-core-655-authenticated-contributor-stored-cross-site-scripting-via-html-api 2024-06-24T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.3/wordpress-core-542-open-redirect 2020-06-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/7.0/wordpress-core-68-701-unauthenticated-sql-injection-via-author__not_in-parameter 2026-07-17T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-22-sql-injection 2007-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.3/wordpress-core-470-631-denial-of-service-via-cache-poisoning 2023-10-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-204-denial-of-service 2006-10-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-arbitrary-file-deletion 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-1513-sensitive-information-disclosure 2005-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-stored-cross-site-scripting-via-comments 2019-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-denial-of-service-via-wp-postpass-cookie 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-cross-site-scripting-in-theme-preview 2015-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-312-incorrect-authorization-for-contributor-level-users 2011-04-26T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.8/wordpress-core-583-authenticated-author-stored-cross-site-scripting 2022-01-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-497-authenticated-arbitrary-file-deletion 2018-07-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-authorization-bypass 2018-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-207-sql-injection 2007-01-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.8/wordpress-682-authenticated-author-stored-cross-site-scripting 2025-09-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-523-reflected-cross-site-scripting-via-shortcode-previews 2019-09-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-server-side-request-forgery 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.0/wordpress-core-401-cross-site-scripting-via-media-playlists 2014-11-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-authorization-bypass-to-remove-category-attribute 2016-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-424-sql-injection 2015-08-04T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.4/wordpress-core-341-cross-site-request-forgery 2012-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-202-reflected-cross-site-scripting 2006-03-10T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.1/wordpress-core-21-directory-traversal 2007-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.9/wordpress-core-591-jquery-prototype-pollution 2022-03-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-server-side-request-forgery 2019-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-cross-site-scripting-via-template-name 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-sensitive-information-disclosure 2018-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-281-open-redirect 2008-12-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-203-remote-code-execution 2006-06-01T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.2/wordpress-core-421-cross-site-scripting-via-comments 2015-04-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-311-denial-of-service 2011-04-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.6/wordpress-core-26-cross-site-scripting 2008-07-15T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-281-cross-site-scripting 2009-07-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-cross-site-scripting 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.0/wordpress-mu-10-cross-site-scripting 2007-08-22T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-cross-site-scripting-in-oembed 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-495-authenticated-stored-cross-site-scripting-via-generator-tag 2018-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-475-server-side-request-forgery 2017-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-sensitive-information-disclosure 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-server-side-request-forgery-2 2019-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.6/wordpress-core-46-cross-site-request-forgery 2016-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-352-missing-authorization-checks 2013-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.7/wordpress-core-28-sensitive-information-disclosure 2009-06-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.6/wordpress-core-361-deserialization 2013-09-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-284-forced-password-reset 2009-08-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/0.70/wordpress-core-070-remote-file-inclusion 2003-06-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.6/wordpress-core-46-authorization-bypass 2016-08-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.5/wordpress-core-351-cross-site-scripting 2013-01-24T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-cross-site-request-forgery-via-wp-trackbackphp 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.5/wordpress-core-652-unauthenticated-authenticated-contributor-stored-cross-site-scripting-via-avatar-block 2024-04-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-491-authenticated-stored-cross-site-scripting 2017-11-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-221-backdoor 2007-03-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.8/wordpress-core-informational-68-weak-hashing-algorithm 2012-06-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-cross-site-request-forgery-via-uploading-flash-file 2017-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.6/wordpress-core-265-cross-site-scripting 2008-12-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.4/wordpress-core-442-open-redirect-via-wp_validate_redirect 2016-02-02T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.2/wordpress-core-121-cross-site-scripting 2004-10-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-209-cross-site-scripting 2007-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.3/wordpress-core-15-231-authorization-bypass 2007-12-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-45-server-side-request-forgery 2016-09-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-stored-cross-site-scripting-via-wp-mailphp 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.2/wordpress-core-524-authenticated-stored-cross-site-scripting 2019-10-14T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-password-change-via-stolen-cookie 2016-06-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.2/wordpress-core-12-http-response-splitting 2004-10-06T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.0/wordpress-core-501-reflected-cross-site-scripting 2018-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.6/wordpress-core-262-cryptographic-weakness 2008-09-08T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.2/wordpress-core-621-directory-traversal 2023-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-313-sensitive-information-disclosure 2011-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.1/wordpress-core-313-clickjacking 2011-05-25T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-information-disclosure-email-address 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-stored-cross-site-scripting-via-theme-directory-name 2017-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-475-cross-site-scripting-via-customizer 2017-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-1513-arbitrary-email-content-change 2005-06-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/5.5/wordpress-core-552-spam-embed-on-multisite-installations 2020-10-29T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.3/wordpress-core-332-authorization-bypass 2012-04-20T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-205-sql-injection 2007-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-22-cross-site-scripting 2007-06-21T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-cross-site-scripting-via-name-and-version-header-of-plugin 2017-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-202-205-sensitive-information-disclosure 2007-01-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.2/wordpress-core-221-sql-injection 2007-08-05T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-475-mishandling-post-meta-values-via-xml-rpc 2017-05-16T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.0/wordpress-core-21-cross-site-request-forgery-to-denial-of-service 2013-12-17T00:00:00.000Z https://wordsec.net/vulnerabilities/core/2.8/wordpress-core-285-arbitrary-file-upload 2009-12-12T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-authenticated-editor-stored-cross-site-scripting-via-comments 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-151-sql-injection 2005-05-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/1.5/wordpress-core-152-remote-code-execution 2005-08-09T00:00:00.000Z https://wordsec.net/vulnerabilities/core/3.4/wordpress-core-341-information-disclosure 2012-06-27T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.9/wordpress-core-495-open-redirect 2018-04-03T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.7/wordpress-core-471-authorization-bypass 2017-01-11T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.8/wordpress-core-482-cross-site-scripting-via-javascript-and-data-urls 2017-09-19T00:00:00.000Z https://wordsec.net/vulnerabilities/core/6.0/wordpress-core-603-sql-injection-via-wp_date_query 2022-10-18T00:00:00.000Z https://wordsec.net/vulnerabilities/core/4.5/wordpress-core-453-cross-site-scripting-via-attachment-name-2 2016-06-18T00:00:00.000Z