Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

wordpress — Vulnerabilities & Security Advisories 33

All 33 CVE vulnerabilities found in wordpress, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for WordPress, a widely used web content management system developed by the WordPress open-source project. It collects known security flaws affecting WordPress core, official plugins, and themes, covering advisories published over the past several years. The dataset includes various weakness types such as cross-site scripting, remote code execution, and authentication bypasses. Readers can use this resource to track vendor-published security advisories, analyze the prevalence of specific weakness classes within the ecosystem, and review the historical vulnerability trends for the WordPress platform. The page does not focus on individual CVE IDs but rather presents a consolidated view of reported issues to help security teams and developers understand the overall risk profile of WordPress deployments.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-87902 CVE-2026-87902 CWE-98 - - 2026-09-22
CVE-2026-93485 WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-09-18
CVE-2026-65640 WordPress 任意文件上传漏洞 CWE-434 - - 2026-08-17
CVE-2026-64638 WordPress 跨站脚本漏洞 CWE-79 8.9 High 2026-08-07
CVE-2026-63030 WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution 9.8 Critical 2026-07-17
CVE-2026-60137 WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query 5.9 Medium 2026-07-17
CVE-2026-3906 WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API CWE-862 4.3 Medium 2026-03-11
CVE-2025-58674 WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability CWE-79 5.9 Medium 2025-09-23
CVE-2025-58246 WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability CWE-201 4.3 Medium 2025-09-23
CVE-2025-54352 WordPress 安全漏洞 CWE-669 3.7 Low 2025-07-21
CVE-2022-4973 WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function CWE-79 4.9 Medium 2024-10-16
CVE-2024-32111 WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability CWE-22 5.0 Medium 2024-06-25
CVE-2024-31111 WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-06-25
CVE-2024-6307 WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API 6.4 Medium 2024-06-25
CVE-2024-4439 WordPress 跨站脚本漏洞 7.2 High 2024-05-03
CVE-2023-5692 WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink CWE-200 5.3 Medium 2024-04-05
CVE-2023-5561 WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure 5.3 - 2023-10-16
CVE-2023-39999 WordPress < 6.3.2 is vulnerable to Broken Access Control CWE-200 4.3 Medium 2023-10-13
CVE-2023-38000 Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block CWE-79 6.5 Medium 2023-10-13
CVE-2023-2745 WordPress Core < 6.2.1 - Directory Traversal CWE-22 5.4 Medium 2023-05-17
CVE-2022-3590 WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding 5.9 - 2022-12-14
CVE-2022-43504 WordPress 授权问题漏洞 5.3 - 2022-12-05
CVE-2022-43500 WordPress 跨站脚本漏洞 6.1 - 2022-12-05
CVE-2022-43497 WordPress 跨站脚本漏洞 6.1 - 2022-12-05
CVE-2011-1762 Wordpress 安全漏洞 CWE-284 6.5 - 2022-04-18
CVE-2020-11026 Specially crafted filenames in WordPress leading to XSS CWE-707 8.7 High 2020-04-30
CVE-2020-11028 Unauthenticated disclosure of certain private posts in WordPress CWE-284 5.8 Medium 2020-04-30
CVE-2020-11029 Cross-site scripting in stats method (object cache) in WordPress CWE-79 5.8 Medium 2020-04-30
CVE-2020-11030 Cross-site scripting (XSS) in Search block in WordPress CWE-707 6.4 Medium 2020-04-30
CVE-2020-11025 Authenticated cross-site scripting (XSS) in WordPress Customizer CWE-79 5.8 Medium 2020-04-30

All 33 known CVE vulnerabilities affecting wordpress with full Chinese analysis, references, and POCs where available.