Other weaknesses

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU cons…CVE-2014-9034Wordpress · 83% likely

   CWE-19

2. Password reset links invalidation issue in WordPressCVE-2020-11027WordPress · CVSS 6.1 · 14% likely

   CWE-672

3. wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-m…CVE-2014-9039Wordpress · 2.5% likely

   CWE-254

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.