No weakness recorded

Every one of the 80 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer ident…CVE-2017-1001000Wordpress · 85% likely
2. Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.CVE-2005-2612Wordpress · 39% likely
3. The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL f…CVE-2013-0235Wordpress · 30% likely
4. WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote attackers to execute arbitrary code via a supply-chain attack against WordPres…CVE-2021-44223Wordpress · CVSS 8.1 · 29% likely
5. Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting a carriage return and PHP code when up…CVE-2006-2667Wordpress · 15% likely
6. WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection prot…CVE-2007-0107Wordpress · 12% likely
7. wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter'…CVE-2007-0233Wordpress · 12% likely
8. CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server vi…CVE-2004-1584Wordpress · 11% likely
9. SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_…CVE-2005-2108Wordpress · 9.3% likely
10. wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remot…CVE-2011-4899Wordpress · 9.0% likely
11. Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other pro…CVE-2012-2399Wordpress · 8.9% likely
12. The wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery (SSRF) attacks via a zero value…CVE-2016-2222Wordpress · 7.9% likely
13. WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a bin…CVE-2007-0540Wordpress · 7.6% likely
14. wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which al…CVE-2012-0937Wordpress · 7.6% likely
15. Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators, as demons…CVE-2007-1244Wordpress · 7.5% likely
16. SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCatego…CVE-2007-3140Wordpress · 7.3% likely
17. Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE:…CVE-2006-6808Wordpress · 6.9% likely
18. Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before…CVE-2007-1049Wordpress · 6.5% likely
19. Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popu…CVE-2004-1559Wordpress · 6.5% likely
20. Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in the 2.1 series, allows remote authenticated users with theme…CVE-2007-1622Wordpress · 6.0% likely
21. SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter.CVE-2007-2821Wordpress · 5.2% likely
22. Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) on…CVE-2006-0733Wordpress · 4.8% likely
23. wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct re…CVE-2008-6767Wordpress · 4.6% likely
24. Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2 allows remote attackers to redirect users to arbitrary web…CVE-2016-2221Wordpress · 4.4% likely
25. WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.CVE-2020-28035Wordpress · 4.3% likely
26. The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors.CVE-2016-5836Wordpress · 4.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.