Wordpress.org vulnerabilities

Products

• Wordpress 5
• Health Check & Troubleshooting 2

Newest

• wordpress.org two factor WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability CVE-2026-100508 5.3 MediumSeptember 30, 2026
• wordpress.org health check & troubleshooting WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability CVE-2025-64253 4.9 MediumDecember 16, 2025
• wordpress, fedoraproject fedora +1 more WordPress < 6.3.2 is vulnerable to Broken Access Control CVE-2023-39999 Fix available 4.3 MediumOctober 13, 2023
• gutenberg team gutenberg, wordpress +1 more Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block CVE-2023-38000 Fix available 6.5 MediumOctober 13, 2023
• the wordpress.org community health check & troubleshooting, wordpress health check \& troubleshooting +1 more WordPress Health Check & Troubleshooting Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-47161 4.3 MediumMay 25, 2023
• wordpress Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote... CVE-2022-43504 Fix available 5.3 MediumNovember 15, 2022
• wordpress Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... CVE-2022-43500 Fix available 6.1 MediumNovember 15, 2022
• wordpress Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... CVE-2022-43497 Fix available 6.1 MediumNovember 15, 2022