WP Cumulus

WP Cumulus has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2009 and 2011; all 4 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.1 out of 10. Severity breakdown: 0 critical and 1 high. 2009 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 4 issues recorded for WP Cumulus has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (3) reported by Eugene Dokukin.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Cumulus vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.1CVE-2009-4169

WP Cumulus < 1.22 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2011-11-20 00:00	WP-Cumulus <= 1.22 - Cross-Site Scripting via xmlpath WP Cumulus <= 1.22	`N/A`	6.1 Medium	Eugene Dokukin	Yes
2009-12-02 00:00	WP-Cumulus <= 1.22 - Cross-Site Scripting via tagcloud WP Cumulus <= 1.22	`CVE-2009-4168`	6.1 Medium	Eugene Dokukin	Yes
2009-11-25 00:00	WP-Cumulus <= 1.20 - Sensitive Information Exposure WP Cumulus <= 1.20	`CVE-2009-4170`	5.3 Medium	Eugene Dokukin	Yes
2009-09-27 00:00	WP Cumulus < 1.22 - Cross-Site Scripting WP Cumulus < 1.22	`CVE-2009-4169`	7.1 High	Thomas Scholz	Yes

Showing 1–4 of 4 reports