Exposición de WordPress

Blogs, CMS
3010
score de exposición
2.714.694
sitios usan
4
en explotación
208
críticos

CVEs

2702 resultados
CVE-2020-11028MEDIUMUnauthenticated disclosure of certain private posts in WordPressEPSS 2.3%CVE-2022-0220—WordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site ScriptingEPSS 2.3%CVE-2021-25033—Noptin < 1.6.5 - Open RedirectEPSS 2.3%CVE-2024-13346HIGHAvada Theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 2.3%CVE-2022-2444HIGHVisualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR DeserializationEPSS 2.3%CVE-2022-23988—WS Form < 1.8.176 - Unauthenticated Stored Cross-Site ScriptingEPSS 2.2%CVE-2015-4615—Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parenEPSS 2.2%CVE-2024-13496HIGHGamiPress <= 7.3.1 - Unauthenticated SQL Injection via orderby ParameterEPSS 2.2%CVE-2021-36879CRITICALWordPress uListing plugin <= 2.0.5 - Unauthenticated Privilege Escalation vulnerabilityEPSS 2.2%CVE-2015-4617—Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying fEPSS 2.2%CVE-2012-10025CRITICALWordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File InclusionEPSS 2.1%CVE-2020-11029MEDIUMCross-site scripting in stats method (object cache) in WordPressEPSS 2.1%CVE-2019-1010209—GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload EPSS 2.1%CVE-2020-4046MEDIUMAuthenticated XSS through embed block in WordPressEPSS 2.1%CVE-2012-10027CRITICALWordPress Plugin WP-Property <= 1.35.0 PHP File UploadEPSS 2.1%CVE-2021-36880HIGHWordPress uListing plugin <= 2.0.3 - Unauthenticated SQL Injection (SQLi) vulnerabilityEPSS 2.1%CVE-2022-28700CRITICALWordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerabilityEPSS 2.1%CVE-2021-29450MEDIUMWordPress Authenticated disclosure of password-protected posts and pagesEPSS 2.1%CVE-2020-11026HIGHSpecially crafted filenames in WordPress leading to XSSEPSS 2.1%CVE-2025-11693CRITICALExport WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log FileEPSS 2.1%