Wordfence Intelligence   >   Vulnerability Database   >   WordPress Core

Showing 341-359 of 359 WordPress Core vulnerabilities

WordPress Core < 3.5.2 - Sensitive Information Disclosure
4.3
CVE-2013-2203
Jun 21, 2013
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 3.4.1 - Information Disclosure
4.3
CVE-2012-3385
Jun 27, 2012
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core <= 3.3.2 - Sensitive Information Disclosure
4.3
CVE-2012-6635
Jun 27, 2012
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 3.1.3 - Sensitive Information Disclosure
4.3
CVE-2011-3128
May 25, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users
4.3
CVE-2011-1762
Apr 26, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure
4.3
CVE-2011-0701
Feb 7, 2011
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 2.9.2 - Authorization Bypass
4.3
CVE-2010-0682
Feb 15, 2010
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 2.1.3 - Authorization Bypass
4.3
CVE-2007-1893
Apr 3, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
WordPress Core < 2.1 - Denial of Service
4.3
CVE-2007-0539
Jan 22, 2007
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
WordPress Core < 2.0.5 - User Metadata Information Disclosure
4.3
CVE-2006-6016
Sep 18, 2006
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
WordPress Core - All known versions - Unauthenticated Blind Server Side Request Forgery
4.0
CVE-2022-3590
Sep 6, 2022
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL
3.8
CVE-2014-5240
Aug 6, 2014
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
WordPress Core < 3.4.2 - Missing Authorization Checks
3.8
CVE-2012-4422
Sep 6, 2012
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
WordPress Core < 6.0.3 - Shared User Instance Weakness
3.7
CVE ID Unknown
Oct 18, 2022
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak)
3.7
CVE ID Unknown
Oct 18, 2022
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
WordPress Core < 5.4.2 - Arbitrary User Meta Update
3.5
CVE-2020-4050
Jun 10, 2020
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
WordPress Core < 4.8.2 - Open Redirect in Admin Dashboard
3.5
CVE-2017-14725
Sep 19, 2017
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
WordPress Core < 3.9.2 - Denial of Service via XML
2.7
CVE-2014-5265
Aug 6, 2014
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
WordPress Core < 5.4.2 - Self-Cross Site Scripting via Theme Folder Name
2.4
CVE-2020-4049
Jun 10, 2020
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Title CVE ID CVSS Vector Date
WordPress Core < 3.5.2 - Sensitive Information Disclosure CVE-2013-2203 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 21, 2013
WordPress Core < 3.4.1 - Information Disclosure CVE-2012-3385 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 27, 2012
WordPress Core <= 3.3.2 - Sensitive Information Disclosure CVE-2012-6635 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N June 27, 2012
WordPress Core < 3.1.3 - Sensitive Information Disclosure CVE-2011-3128 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N May 25, 2011
WordPress Core < 3.1.2 - Incorrect Authorization for Contributor-level users CVE-2011-1762 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 26, 2011
WordPress Core < 3.0.5 - Improper Authorization to Information Disclosure CVE-2011-0701 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N February 7, 2011
WordPress Core < 2.9.2 - Authorization Bypass CVE-2010-0682 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N February 15, 2010
WordPress Core < 2.1.3 - Authorization Bypass CVE-2007-1893 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N April 3, 2007
WordPress Core < 2.1 - Denial of Service CVE-2007-0539 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L January 22, 2007
WordPress Core < 2.0.5 - User Metadata Information Disclosure CVE-2006-6016 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N September 18, 2006
WordPress Core - All known versions - Unauthenticated Blind Server Side Request Forgery CVE-2022-3590 4.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N September 6, 2022
WordPress Core < 3.9.2 - Authenticated Cross-Site Scripting via Avatar URL CVE-2014-5240 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N August 6, 2014
WordPress Core < 3.4.2 - Missing Authorization Checks CVE-2012-4422 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L September 6, 2012
WordPress Core < 6.0.3 - Shared User Instance Weakness 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N October 18, 2022
WordPress Core < 6.0.3 - Information Disclosure (Multi-Part Email Leak) 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N October 18, 2022
WordPress Core < 5.4.2 - Arbitrary User Meta Update CVE-2020-4050 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N June 10, 2020
WordPress Core < 4.8.2 - Open Redirect in Admin Dashboard CVE-2017-14725 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L September 19, 2017
WordPress Core < 3.9.2 - Denial of Service via XML CVE-2014-5265 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L August 6, 2014
WordPress Core < 5.4.2 - Self-Cross Site Scripting via Theme Folder Name CVE-2020-4049 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N June 10, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation