Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Authentication Bypass Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity WordPress 6.2.x Cross-Site Scripting (6.2 - 6.2.4) CVE-2024-4439 CWE-79 CWE-79 High WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.2) CVE-2023-5561 CVE-2023-38000 CVE-2023-39999 CWE-79 CWE-200 CWE-400 CWE-863 CWE-79 CWE-200 CWE-400 CWE-863 High WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3) CWE-434 CWE-502 CWE-434 CWE-502 High WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5) CWE-22 CWE-79 CWE-22 CWE-79 High WordPress 6.2.x Shortcode Execution (6.2 - 6.2.1) CWE-862 CWE-862 High WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3) CVE-2024-4439 CWE-79 CWE-79 High WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.1) CVE-2023-5561 CVE-2023-38000 CVE-2023-39999 CWE-79 CWE-200 CWE-400 CWE-863 CWE-79 CWE-200 CWE-400 CWE-863 High WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.2) CWE-434 CWE-502 CWE-434 CWE-502 High WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.4) CWE-22 CWE-79 CWE-22 CWE-79 High WordPress 6.4.x Cross-Site Scripting (6.4 - 6.4.3) CVE-2024-4439 CWE-79 CWE-79 High WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.2) CWE-434 CWE-502 CWE-434 CWE-502 High WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.4) CWE-22 CWE-79 CWE-22 CWE-79 High WordPress 6.4.x Remote Code Execution (6.4 - 6.4.1) CWE-502 CWE-502 High WordPress 6.5 Cross-Site Scripting (6.5) CVE-2024-4439 CWE-79 CWE-79 High WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4) CWE-22 CWE-79 CWE-22 CWE-79 High WordPress Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2019-17675) CVE-2019-17675 CWE-843 CWE-843 High WordPress Anti-CSRF Token Security Bypass Weakness (3.3.1) CVE-2012-1936 CWE-352 CWE-352 High WordPress caching plugins PHP code execution CVE-2013-2010 CWE-95 CWE-95 High WordPress Clickjacking Vulnerability (0.7 - 3.1.2) CVE-2011-3127 CWE-693 CWE-693 High WordPress Comment Post Cross-Site Scripting Vulnerability (2.0) CVE-2006-0733 CWE-79 CWE-79 High WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3) CVE-2005-2612 CWE-94 CWE-94 High WordPress Cookies Security Bypass Weakness (1.5 - 2.3.1) CVE-2007-6013 CWE-287 CWE-287 High WordPress Credentials Management Errors Vulnerability (CVE-2009-2762) CVE-2009-2762 High WordPress Credentials Management Errors Vulnerability (CVE-2016-5838) CVE-2016-5838 High WordPress Cross-Domain Flash Injection Vulnerability (0.70 - 3.6.1) CVE-2016-9263 CVE-2018-5776 CWE-269 CWE-269 High WordPress Cross-Site Request Forgery (0.70 - 3.6.1) CVE-2019-9787 CWE-352 CWE-352 High WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6635) CVE-2016-6635 CWE-352 CWE-352 High WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5489) CVE-2017-5489 CWE-352 CWE-352 High WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5492) CVE-2017-5492 CWE-352 CWE-352 High WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-9064) CVE-2017-9064 CWE-352 CWE-352 High WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-9787) CVE-2019-9787 CWE-352 CWE-352 High WordPress Cross-Site Scripting Vulnerability (0.70 - 3.7.11) CVE-2016-1564 CWE-79 CWE-79 High WordPress Cross-Site Scripting Vulnerability (0.70 - 4.1.1) CVE-2015-3438 CWE-79 CWE-79 High WordPress Cross-Site Scripting Vulnerability (3.0 - 3.6.1) CVE-2014-9031 CWE-79 CWE-79 High WordPress Cross-Site Scripting Vulnerability (3.9 - 4.1.1) CVE-2015-3439 CWE-79 CWE-79 High WordPress Cross-Site Scripting Vulnerability (3.9.3 - 4.2) CVE-2015-3440 CWE-79 CWE-79 High WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899) CVE-2011-4899 High WordPress CVE-2014-5203 Vulnerability (CVE-2014-5203) CVE-2014-5203 High WordPress CVE-2016-5832 Vulnerability (CVE-2016-5832) CVE-2016-5832 High WordPress CVE-2016-5836 Vulnerability (CVE-2016-5836) CVE-2016-5836 High WordPress CVE-2016-5837 Vulnerability (CVE-2016-5837) CVE-2016-5837 High WordPress CVE-2016-5839 Vulnerability (CVE-2016-5839) CVE-2016-5839 High WordPress CVE-2017-1001000 Vulnerability (CVE-2017-1001000) CVE-2017-1001000 High WordPress CVE-2019-17673 Vulnerability (CVE-2019-17673) CVE-2019-17673 High WordPress CVE-2020-28033 Vulnerability (CVE-2020-28033) CVE-2020-28033 High WordPress debug mode CWE-200 CWE-200 High WordPress Denial of Service Vulnerability (0.70 - 3.6.1) CVE-2018-6389 CWE-400 CWE-400 High WordPress Denial of Service Vulnerability (3.5 - 3.6.1) CVE-2014-5265 CWE-399 CWE-399 High WordPress Deserialization of Untrusted Data Vulnerability (CVE-2018-19296) CVE-2018-19296 CWE-502 CWE-502 High WordPress Deserialization of Untrusted Data Vulnerability (CVE-2022-21663) CVE-2022-21663 CWE-502 CWE-502 High WordPress Directory Traversal (3.7 - 5.0.3) CVE-2019-8943 CWE-22 CWE-22 High WordPress Duplicator plugin Unauthenticated Arbitrary File Download CWE-22 CWE-22 High WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5835) CVE-2016-5835 CWE-200 CWE-200 High WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20151) CVE-2018-20151 CWE-200 CWE-200 High WordPress Improper Authentication Vulnerability (CVE-2008-1930) CVE-2008-1930 CWE-287 CWE-287 High WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2003-1599) CVE-2003-1599 CWE-94 CWE-94 High WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4338) CVE-2013-4338 CWE-94 CWE-94 High WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-8942) CVE-2019-8942 CWE-94 CWE-94 High WordPress Improper Input Validation Vulnerability (CVE-2007-1277) CVE-2007-1277 CWE-20 CWE-20 High WordPress Improper Input Validation Vulnerability (CVE-2008-5695) CVE-2008-5695 CWE-20 CWE-20 High WordPress Improper Input Validation Vulnerability (CVE-2013-4339) CVE-2013-4339 CWE-20 CWE-20 High WordPress Improper Input Validation Vulnerability (CVE-2017-9065) CVE-2017-9065 CWE-20 CWE-20 High WordPress Improper Input Validation Vulnerability (CVE-2017-1000600) CVE-2017-1000600 CWE-20 CWE-20 High WordPress Improper Input Validation Vulnerability (CVE-2018-1000773) CVE-2018-1000773 CWE-20 CWE-20 High WordPress Improper Input Validation Vulnerability (CVE-2020-26596) CVE-2020-26596 CWE-20 CWE-20 High WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0194) CVE-2008-0194 CWE-22 CWE-22 High WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6896) CVE-2016-6896 CWE-22 CWE-22 High WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14719) CVE-2017-14719 CWE-22 CWE-22 High WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14722) CVE-2017-14722 CWE-22 CWE-22 High WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-12895) CVE-2018-12895 CWE-22 CWE-22 High WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9062) CVE-2017-9062 CWE-707 CWE-707 High WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-4894) CVE-2007-4894 CWE-138 CWE-138 High WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0491) CVE-2008-0491 CWE-138 CWE-138 High WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4625) CVE-2008-4625 CWE-138 CWE-138 High WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3130) CVE-2011-3130 CWE-138 CWE-138 High 1...58596061...165 59 / 165
