Exposición de WordPress

Blogs, CMS
3010
score de exposición
2.714.694
sitios usan
4
en explotación
208
críticos

CVEs

2702 resultados
CVE-2024-6651MEDIUMWordPress File Upload < 4.24.8 - Reflected XSSEPSS 15.7%CVE-2025-4322CRITICALMotors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account TakeoverEPSS 15.4%CVE-2024-10392CRITICALAI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File UploadEPSS 15.0%CVE-2026-8181CRITICALBurst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account TakeoverEPSS 14.6%CVE-2020-11027MEDIUMPassword reset links invalidation issue in WordPressEPSS 13.6%CVE-2013-1916—In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on thEPSS 12.8%CVE-2024-9593HIGHTime Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code ExecutionEPSS 12.4%CVE-2024-8529CRITICALLearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields'EPSS 12.1%CVE-2021-24915—Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address DisclosureEPSS 12.0%CVE-2023-23489CRITICALThe Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in thEPSS 11.3%CVE-2025-4524CRITICALMadara – Responsive and modern WordPress theme for manga sites <= 2.2.2 - Unauthenticated Local File InclusionEPSS 10.6%CVE-2024-4443CRITICALBusiness Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields ParameterEPSS 10.4%CVE-2024-4295CRITICALEmail Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hashEPSS 10.2%CVE-2021-43408MEDIUMDuplicate Post WordPress Plugin SQL Injection VulnerabilityEPSS 9.7%CVE-2023-6634HIGHLearnPress <= 4.2.5.7 - Command InjectionEPSS 8.6%CVE-2022-0814—Ubigeo de Peru < 3.6.4 - Unauthenticated SQLiEPSS 8.0%CVE-2024-9935HIGHPDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File DownloadEPSS 7.6%CVE-2022-0864—UpdraftPlus < 1.22.9 - Reflected Cross-Site ScriptingEPSS 7.4%CVE-2017-6104—Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.EPSS 7.3%CVE-2020-5766—Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 aEPSS 7.2%