Command and Code Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. WordPress Sniplets 1.1.2 - Local File InclusionCVE-2008-1059Wordpress · 48% likely

   CWE-94

2. Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text paramet…CVE-2008-1060Wordpress · 44% likely

   CWE-94

3. wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by trigge…CVE-2013-4338Wordpress · 9.1% likely

   CWE-94

4. Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the mod_mime modul…CVE-2009-3890Wordpress · 8.7% likely

   CWE-94

5. Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to upload and execute arbitrary PHP code via u…CVE-2008-0222Wordpress · 7.7% likely

   CWE-94

6. PHP remote file inclusion vulnerability in wp-links/links.all.php in WordPress 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the $abspath variable.CVE-2003-1599Wordpress · 3.1% likely

   CWE-94

7. WordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerabilityCVE-2026-45293WordPress · CVSS 8.6 · 0.2% likelycovered by CyberSIXT

   CWE-95

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.