Skip to content
BackEsc
Sign in

WordPress · weakness class

File and Path Handling

22 CVEs · 3 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

exploited in the wild
3
check available
3
likely to be exploited
6

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

  1. WordPress Duplicator 1.3.24 & 1.3.26 - Local File InclusionCVE-2020-11738WordPress · CVSS 7.5 · 98% likely

    CWE-22

  2. WordPress File Manager Plugin - Remote Code ExecutionCVE-2020-25213WordPress · CVSS 10 · 97% likely

    CWE-434

  3. WordPress Core - PHP Template Path TraversalCVE-2026-87902WordPress · CVSS 8.1 · 96% likelycovered by CyberSIXT

    CWE-9810 articles

  4. WordPress Core 5.0.0 - Crop-image Shell UploadCVE-2019-8943Wordpress · 92% likely

    CWE-22

  5. WordPress Core <=6.2 - Directory TraversalCVE-2023-2745WordPress Foundation · CVSS 5.4 · 80% likely

    CWE-22

  6. WordPress Plugin Advanced Dewplayer 1.2 - Directory TraversalCVE-2013-7240Wordpress · 20% likely

    CWE-22

  7. WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending wit…CVE-2019-8942Wordpress · 82% likely

    CWE-434

  8. WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/post.php thumb parameter, which is passed to the PHP unlink…CVE-2018-12895Wordpress · 62% likely

    CWE-221 bounty report

  9. Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denia…CVE-2016-6896Wordpress · 38% likely

    CWE-22

  10. In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is uploaded, the plugin extr…CVE-2018-14028Wordpress · 15% likely

    CWE-434

  11. Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.CVE-2017-14719Wordpress · 12% likely

    CWE-22

  12. Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the data p…CVE-2012-3588Wordpress · 10% likely

    CWE-22

  13. Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and po…CVE-2008-4769Wordpress · 9.0% likely

    CWE-22

  14. Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow remote attackers to read arbitrary files via a .. (dot dot)…CVE-2007-6369Wordpress · 7.5% likely

    CWE-22

  15. Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename.CVE-2017-14722Wordpress · 7.1% likely

    CWE-22

  16. Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attacker…CVE-2008-5752Wordpress · 5.8% likely

    CWE-22

  17. Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of…CVE-2008-0194Wordpress · 3.8% likely

    CWE-22

  18. Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the page parameter to certain…CVE-2008-0196Wordpress · 3.4% likely

    CWE-22

  19. Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 a…CVE-2016-7169Wordpress · 3.2% likely

    CWE-22

  20. Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…CVE-2008-6762Wordpress · 2.1% likely

    CWE-59

  21. WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript i…CVE-2026-65640WordPress · CVSS 8.8 · 1.9% likelycovered by CyberSIXT

    CWE-434

  22. PHP file upload bypass via Plugin installerCVE-2024-31210WordPress · CVSS 7.7 · 1.0% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

CyberSIXTSignal over noise
Updated AboutDevelopersSign in