WordPress

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using…CVE-2022-43504WordPress.org · CVSS 5.3 · 1.6% likely

   CWE-287

2. Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new pat…CVE-2022-43497WordPress.org · CVSS 6.1 · 1.3% likely

   CWE-79

3. WordPress < 6.3.2 is vulnerable to Broken Access ControlCVE-2023-39999WordPress.org · CVSS 4.3 · 1.2% likely

   CWE-200

4. Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new pat…CVE-2022-43500WordPress.org · CVSS 6.1 · 1.0% likely

   CWE-79

5. Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links BlockCVE-2023-38000WordPress.org · CVSS 6.5 · 0.9% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.