wordpress-develop

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. WordPress <5.8.3 - SQL InjectionCVE-2022-21661WordPress · CVSS 8 · 98% likely

   CWE-89

2. WordPress Authenticated XXE attack when installation is running PHP 8CVE-2021-29447WordPress · CVSS 7.1 · 86% likely

   CWE-611

3. Stored XSS in WordPressCVE-2022-21662WordPress · CVSS 8 · 65% likely

   CWE-79

4. Authenticated Object Injection in Multisites in WordPressCVE-2022-21663WordPress · CVSS 6.6 · 3.8% likely

   CWE-74

5. SQL injection in WordPressCVE-2022-21664WordPress · CVSS 7.4 · 3.7% likely

   CWE-89

6. Authenticated XSS via media attachment page in WordPressCVE-2020-4047WordPress · CVSS 6.8 · 3.3% likely

   CWE-80

7. Remote Code Execution in `WP_HTML_Token`CVE-2024-31211WordPress · CVSS 5.5 · 2.7% likely

   CWE-502

8. Authenticated self-XSS via theme uploads in WordPressCVE-2020-4049WordPress · CVSS 2.4 · 2.5% likely

   CWE-80

9. Authenticated XSS through embed block in WordPressCVE-2020-4046WordPress · CVSS 5.4 · 2.1% likely

   CWE-80

10. WordPress Authenticated disclosure of password-protected posts and pagesCVE-2021-29450WordPress · CVSS 6.5 · 2.1% likely

    CWE-200

11. Open redirect in wp_validate_redirect() in WordPressCVE-2020-4048WordPress · CVSS 5.7 · 2.0% likely

    CWE-601

12. Information Disclosure in wp_die() via JSONP in wordpressCVE-2021-39200WordPress · CVSS 5.3 · 2.0% likely

    CWE-200

13. Authenticated cross-site scripting (XSS) in WordPress editorCVE-2021-39201WordPress · CVSS 7.6 · 1.5% likely

    CWE-79

14. set-screen-option filter misuse by plugins leading to privilege escalation in WordPressCVE-2020-4050WordPress · CVSS 3.5 · 1.4% likely

    CWE-288

15. PHP file upload bypass via Plugin installerCVE-2024-31210WordPress · CVSS 7.7 · 1.0% likely

    CWE-434

16. Private data disclosure/privilege escalation through the block editor in WordpressCVE-2021-39203WordPress · CVSS 6.8 · 0.9% likely

    CWE-200

17. WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widgetCVE-2021-39202WordPress · CVSS 7.6 · 0.8% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.