Wordfence Intelligence   >   Vulnerability Database   >   WordPress Core

Showing 241-260 of 359 WordPress Core vulnerabilities

WordPress Core < 3.3.2 - Authorization Bypass
5.4
CVE-2012-2402
Apr 20, 2012
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
WordPress Core <= 3.3 - Cross-Site Scripting
6.4
CVE-2012-0287
Jan 3, 2012
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core < 3.1.3 - Media Related Security Issue
6.3
CVE-2011-3122
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
WordPress Core < 3.1.3 - Security Hardening
6.3
CVE-2011-3125
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
WordPress Core < 3.1.3 - Username Enumeration
5.3
CVE-2011-3126
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
WordPress Core <= 3.1.2 - Arbitrary File Upload
8.8
CVE-2011-3129
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Core <= 3.1.2 - SQL Injection
8.8
CVE-2011-3130
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Core < 3.1.3 - Sensitive Information Disclosure
4.3
CVE-2011-3128
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 3.1.3 - Clickjacking
7.1
CVE-2011-3127
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
WordPress Core < 3.0.6 - Incorrect Authorization Checks
6.3
CVE-2011-5270
Apr 26, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users
4.3
CVE-2011-1762
Apr 26, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Core <= 3.1 - Cross-Site Scripting
6.4
CVE-2011-4956
Apr 5, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core < 3.1.1 - Denial of Service
7.5
CVE-2011-4957
Apr 5, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure
4.3
CVE-2011-0701
Feb 7, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure
7.5
CVE-2011-3818
Jan 28, 2011
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
WordPress Core < 3.0.2 - Missing Authorization
5.4
CVE-2010-5296
Dec 30, 2010
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
WordPress Core <= 3.0.3 - Cross-Site Scripting
6.4
CVE-2010-4536
Dec 29, 2010
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core < 3.0.3 - Access Control Bypass
6.3
CVE-2010-5106
Dec 8, 2010
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
WordPress Core < 3.0.2 - Spam Protection Bypass
5.3
CVE-2010-5293
Nov 30, 2010
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
WordPress Core < 3.0.2 - Cross-Site Scripting
6.4
CVE-2010-5294
Nov 30, 2010
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WordPress Core < 3.3.2 - Authorization Bypass CVE-2012-2402 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L April 20, 2012
WordPress Core <= 3.3 - Cross-Site Scripting CVE-2012-0287 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N January 3, 2012
WordPress Core < 3.1.3 - Media Related Security Issue CVE-2011-3122 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L May 25, 2011
WordPress Core < 3.1.3 - Security Hardening CVE-2011-3125 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L May 25, 2011
WordPress Core < 3.1.3 - Username Enumeration CVE-2011-3126 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N May 25, 2011
WordPress Core <= 3.1.2 - Arbitrary File Upload CVE-2011-3129 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H May 25, 2011
WordPress Core <= 3.1.2 - SQL Injection CVE-2011-3130 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H May 25, 2011
WordPress Core < 3.1.3 - Sensitive Information Disclosure CVE-2011-3128 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N May 25, 2011
WordPress Core < 3.1.3 - Clickjacking CVE-2011-3127 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L May 25, 2011
WordPress Core < 3.0.6 - Incorrect Authorization Checks CVE-2011-5270 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L April 26, 2011
WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users CVE-2011-1762 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 26, 2011
WordPress Core <= 3.1 - Cross-Site Scripting CVE-2011-4956 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 5, 2011
WordPress Core < 3.1.1 - Denial of Service CVE-2011-4957 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H April 5, 2011
WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure CVE-2011-0701 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N February 7, 2011
WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure CVE-2011-3818 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N January 28, 2011
WordPress Core < 3.0.2 - Missing Authorization CVE-2010-5296 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L December 30, 2010
WordPress Core <= 3.0.3 - Cross-Site Scripting CVE-2010-4536 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N December 29, 2010
WordPress Core < 3.0.3 - Access Control Bypass CVE-2010-5106 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L December 8, 2010
WordPress Core < 3.0.2 - Spam Protection Bypass CVE-2010-5293 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N November 30, 2010
WordPress Core < 3.0.2 - Cross-Site Scripting CVE-2010-5294 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N November 30, 2010

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation