Exposición de WordPress

Blogs, CMS
3010
score de exposición
2.714.694
sitios usan
4
en explotación
208
críticos

CVEs

2702 resultados
CVE-2024-6569MEDIUMCampaign Monitor for WordPress <= 2.8.15 - Unauthenticated Full Path DisclosureEPSS 0.9%CVE-2024-11010HIGHFileOrganizer <= 1.1.4 - Authenticated (Administrator+) Local JavaScript File InclusionEPSS 0.9%CVE-2024-10801CRITICALWordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File UploadEPSS 0.9%CVE-2024-13091CRITICALWPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File UploadEPSS 0.9%CVE-2025-6784HIGHCode Engine <= 0.3.5 - Authenticated (Contributor+) Remote Code ExecutionEPSS 0.9%CVE-2023-1425HIGHGroundhogg Contacts < 2.7.9.4 - Admin+ SQLiEPSS 0.9%CVE-2021-20781—Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions priEPSS 0.8%CVE-2022-45370MEDIUMWordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV InjectionEPSS 0.8%CVE-2023-3154HIGHNextGEN Gallery < 3.39 - Admin+ PHAR DeserializationEPSS 0.8%CVE-2022-27845MEDIUMWordPress Plausible Analytics plugin <= 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.8%CVE-2026-16060CRITICALInsert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File UploadEPSS 0.8%CVE-2023-2446MEDIUMUserPro <= 5.1.1 - Sensitive Information Disclosure via ShortcodeEPSS 0.8%CVE-2023-5692MEDIUMWordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalinkEPSS 0.8%CVE-2025-4200HIGHZagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File InclusionEPSS 0.8%CVE-2022-29419MEDIUMWordPress 3xSocializer plugin <= 0.98.22 - Authenticated SQL Injection (SQLi) vulnerabilityEPSS 0.8%CVE-2024-2409CRITICALMasterStudy LMS <= 3.3.1 - Unauthenticated Privilege Escalation via stm_lms_register AJAX ActionEPSS 0.8%CVE-2025-32257MEDIUMWordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerabilityEPSS 0.8%CVE-2022-38467MEDIUMWordPress CRM Perks Forms Plugin <= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.8%CVE-2021-26256MEDIUMWordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.8%CVE-2025-5014HIGHHome Villas | Real Estate WordPress Theme <= 2.8 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.8%