Wordpress Wordpress-develop vulnerabilities

• wordpress, wordpress wordpress-develop +1 more Remote Code Execution in `WP_HTML_Token` CVE-2024-31211 Public exploitFix available 5.5 MediumApril 4, 2024
• wordpress, wordpress wordpress-develop +1 more PHP file upload bypass via Plugin installer CVE-2024-31210 Fix available 7.7 HighApril 4, 2024
• wordpress, debian linux, wordpress wordpress-develop +2 more Stored XSS in WordPress CVE-2022-21662 Fix available EPSS 64.5% 8.0 HighJanuary 6, 2022
• wordpress, debian linux, fedoraproject fedora +1 more +3 more Authenticated Object Injection in Multisites in WordPress CVE-2022-21663 Fix available 6.6 MediumJanuary 6, 2022
• wordpress, debian linux, fedoraproject fedora +1 more +3 more SQL injection in WordPress CVE-2022-21664 Fix available 7.4 HighJanuary 6, 2022
• wordpress, debian linux, fedoraproject fedora +1 more +3 more SQL injection in WordPress CVE-2022-21661 Public exploitFix available EPSS 97.8% 8.0 HighJanuary 6, 2022
• wordpress, wordpress wordpress-develop +1 more Private data disclosure/privilege escalation through the block editor in Wordpress CVE-2021-39203 6.8 MediumSeptember 9, 2021
• wordpress, wordpress wordpress-develop +1 more WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget CVE-2021-39202 7.6 HighSeptember 9, 2021
• wordpress, debian linux, wordpress wordpress-develop +2 more Authenticated cross-site scripting (XSS) in WordPress editor CVE-2021-39201 Fix available 7.6 HighSeptember 9, 2021
• wordpress, debian linux, wordpress wordpress-develop +2 more Information Disclosure in wp_die() via JSONP in wordpress CVE-2021-39200 Fix available 5.3 MediumSeptember 9, 2021
• wordpress, debian linux, wordpress wordpress-develop +2 more WordPress Authenticated disclosure of password-protected posts and pages CVE-2021-29450 Fix available 6.5 MediumApril 15, 2021
• wordpress, debian linux, wordpress wordpress-develop +2 more WordPress Authenticated XXE attack when installation is running PHP 8 CVE-2021-29447 Public exploitFix available EPSS 85.7% 7.1 HighApril 15, 2021
• wordpress, debian linux, fedoraproject fedora +1 more +3 more Authenticated XSS via media attachment page in WordPress CVE-2020-4047 Fix available 6.8 MediumJune 12, 2020
• wordpress, debian linux, fedoraproject fedora +1 more +3 more Open redirect in wp_validate_redirect() in WordPress CVE-2020-4048 Fix available 5.7 MediumJune 12, 2020
• wordpress, debian linux, fedoraproject fedora +1 more +3 more Authenticated self-XSS via theme uploads in WordPress CVE-2020-4049 Fix available 2.4 LowJune 12, 2020
• wordpress, debian linux, fedoraproject fedora +1 more +3 more set-screen-option filter misuse by plugins leading to privilege escalation in WordPress CVE-2020-4050 Fix available 3.5 LowJune 12, 2020
• wordpress, debian linux, fedoraproject fedora +1 more +3 more Authenticated XSS through embed block in WordPress CVE-2020-4046 Fix available 5.4 MediumJune 12, 2020