WordPress

Records428All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical33CVSS 9.0–10.0

CVSS high101CVSS 7.0–8.9

Exploited now

WordPress records in CISA KEV

TI-2026-83466 WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability CRITICAL 94KEV 2026-11-03 TI-2026-59973 WordPress Core Remote File Inclusion Vulnerability CRITICAL 94KEV 2026-09-25 TI-2026-42844 WordPress Core SQL Injection Vulnerability CRITICAL 86KEV 2026-07-21 TI-2026-45010 WordPress Core Interpretation Conflict Vulnerability CRITICAL 100KEV 2026-07-21 TI-2016-08118 PHPMailer Command Injection Vulnerability CRITICAL 100KEV 2025-07-07 TI-2019-07343 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Wordpress 357 records CRITICAL Wordpress Mu 10 records MEDIUM Sniplets Plugin 3 records MEDIUM Blix 2 records LOW Math Comment Spam Protection Plugin 2 records LOW Pay-with-tweet 2 records LOW Wassup Plugin 2 records LOW Adserve 1 record LOW

Records

1 record in Adserve · all components

TI-2008-00479 CVE-2008-0507 · GHSA-pp96-r3vp-w36g

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows…

LOW 38

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02742 Published 2008-01-31 No fix listed CWE-89

Open these records in search →

Critical	33
High	101
Medium	274
Low	20
No CVSS	0