Wordfence Intelligence   >   Vulnerability Database   >   WordPress Core

Showing 301-320 of 359 WordPress Core vulnerabilities

WordPress Core < 2.2.2 - Open Redirect
6.1
CVE-2007-3639
Aug 8, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Core <= 2.2.1 - Arbitrary File Upload
8.8
CVE-2007-3544
Aug 5, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Core <= 2.2.2 - Cross-Site Scripting
6.4
CVE-2007-4893
Aug 5, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core <= 2.2.1 - Cross-Site Scripting
6.4
CVE-2007-4139
Aug 5, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core <= 2.2.1 - Authenticated (Admin+) Cross-Site Scripting
5.5
CVE-2007-4153
Aug 5, 2007
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
WordPress Core <= 2.2 - Arbitrary File Upload
8.8
CVE-2007-3543
Aug 5, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Core <= 2.2.1 - SQL Injection
8.8
CVE-2007-4154
Aug 5, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Core <= 2.2 - Cross-Site Scripting
6.1
CVE-2007-2627
Jun 21, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Core <= 2.2 - SQL Injection
8.8
CVE-2007-3140
Jun 21, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Core < 2.1.3 - Authorization Bypass
4.3
CVE-2007-1893
Apr 3, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Core < 2.1.3 - SQL Injection
8.8
CVE-2007-1897
Apr 3, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
WordPress Core < 2.0.10 - Open Redirect
6.1
CVE-2007-1599
Apr 3, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Core <= 2.1.2 - Cross-Site Scripting
6.1
CVE-2007-1622
Apr 3, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
WordPress Core <= 2.0.9 - Cross-Site Scripting
7.2
CVE-2008-0192
Apr 3, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
WordPress Core <= 2.1.2 - Cross-Site Scripting
6.4
CVE-2007-1894
Apr 3, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core 2.2.1 - Backdoor
9.8
CVE-2007-1277
Mar 3, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress Core <= 2.1.1 - Cross-Site Scripting
6.4
CVE-2007-1244
Mar 2, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core 2.1.1 - Supply Chain Compromise
9.8
CVE ID Unknown
Mar 2, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
WordPress Core <= 2.1.1 - Cross-Site Scripting
6.4
CVE-2007-1230
Mar 2, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
WordPress Core < 2.09 - Cross-Site Scripting
7.2
CVE-2007-1049
Feb 21, 2007
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Title CVE ID CVSS Vector Date
WordPress Core < 2.2.2 - Open Redirect CVE-2007-3639 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N August 8, 2007
WordPress Core <= 2.2.1 - Arbitrary File Upload CVE-2007-3544 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 5, 2007
WordPress Core <= 2.2.2 - Cross-Site Scripting CVE-2007-4893 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 5, 2007
WordPress Core <= 2.2.1 - Cross-Site Scripting CVE-2007-4139 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N August 5, 2007
WordPress Core <= 2.2.1 - Authenticated (Admin+) Cross-Site Scripting CVE-2007-4153 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N August 5, 2007
WordPress Core <= 2.2 - Arbitrary File Upload CVE-2007-3543 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 5, 2007
WordPress Core <= 2.2.1 - SQL Injection CVE-2007-4154 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H August 5, 2007
WordPress Core <= 2.2 - Cross-Site Scripting CVE-2007-2627 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N June 21, 2007
WordPress Core <= 2.2 - SQL Injection CVE-2007-3140 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H June 21, 2007
WordPress Core < 2.1.3 - Authorization Bypass CVE-2007-1893 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 3, 2007
WordPress Core < 2.1.3 - SQL Injection CVE-2007-1897 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H April 3, 2007
WordPress Core < 2.0.10 - Open Redirect CVE-2007-1599 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 3, 2007
WordPress Core <= 2.1.2 - Cross-Site Scripting CVE-2007-1622 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N April 3, 2007
WordPress Core <= 2.0.9 - Cross-Site Scripting CVE-2008-0192 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N April 3, 2007
WordPress Core <= 2.1.2 - Cross-Site Scripting CVE-2007-1894 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N April 3, 2007
WordPress Core 2.2.1 - Backdoor CVE-2007-1277 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 3, 2007
WordPress Core <= 2.1.1 - Cross-Site Scripting CVE-2007-1244 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 2, 2007
WordPress Core 2.1.1 - Supply Chain Compromise 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H March 2, 2007
WordPress Core <= 2.1.1 - Cross-Site Scripting CVE-2007-1230 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N March 2, 2007
WordPress Core < 2.09 - Cross-Site Scripting CVE-2007-1049 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N February 21, 2007

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation