Exposición de WordPress

Blogs, CMS
3010
score de exposición
2.714.694
sitios usan
4
en explotación
208
críticos

CVEs

2702 resultados
CVE-2025-2158HIGHWordPress Review Plugin: The Ultimate Solution for Building a Review Website <= 5.3.5 - Authenticated (Contributor+) Local File Inclusion via Post Custom FieldsEPSS 0.9%CVE-2024-8704HIGHAdvanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localeEPSS 0.9%CVE-2022-31475MEDIUMWordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerabilityEPSS 0.9%CVE-2022-0161—ARI Fancy Lightbox < 1.3.9 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2026-16502HIGHLive Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via ShortcodeEPSS 0.9%CVE-2023-28659HIGHThe Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbcEPSS 0.9%CVE-2023-38000MEDIUMAuth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links BlockEPSS 0.9%CVE-2023-28661—The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameteEPSS 0.9%CVE-2023-28660—The Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL injection vulnerability in the 'search_name' paEPSS 0.9%CVE-2023-26325—The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValEPSS 0.9%CVE-2021-20779—Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote atEPSS 0.9%CVE-2026-4365CRITICALLearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer DeletionEPSS 0.9%CVE-2025-11977MEDIUMHappyForms <= 1.26.12 - Authenticated (Admin+) Local File InclusionEPSS 0.9%CVE-2022-23912—AP Custom Testimonial < 1.4.8 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2021-20780—Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack thEPSS 0.9%CVE-2022-0628—AP Mega Menu < 3.0.8 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2025-2257HIGHTotal Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.10 - Authenticated (Admin+) Command InjectionEPSS 0.9%CVE-2022-1527—WP 2FA < 2.2.1 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2026-15323HIGHProduct Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON UploadEPSS 0.9%CVE-2026-65553CRITICALWordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerabilityEPSS 0.9%