Read the docs

WordPress

Records428All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical33CVSS 9.0–10.0
CVSS high101CVSS 7.0–8.9

Exploited now

WordPress records in CISA KEV
TI-2026-83466 WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability Priority CRITICAL 94KEV 2026-11-03TI-2026-59973 WordPress Core Remote File Inclusion Vulnerability Priority CRITICAL 94KEV 2026-09-25TI-2026-42844 WordPress Core SQL Injection Vulnerability Priority CRITICAL 86KEV 2026-07-21TI-2026-45010 WordPress Core Interpretation Conflict Vulnerability Priority CRITICAL 100KEV 2026-07-21TI-2016-08118 PHPMailer Command Injection Vulnerability Priority CRITICAL 100KEV 2025-07-07TI-2019-07343 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability Priority HIGH 84KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Wordpress 357 records CRITICAL Wordpress Mu 10 records MEDIUM Sniplets Plugin 3 records MEDIUM Blix 2 records LOW Math Comment Spam Protection Plugin 2 records LOW Pay-with-tweet 2 records LOW Wassup Plugin 2 records LOW Adserve 1 record LOW

Records

2 records in Math Comment Spam Protection Plugin · all components

TI-2008-00187 CVE-2008-0205 · GHSA-f9p6-65gj-r6fx

Multiple cross-site request forgery (CSRF) vulnerabilities in…

Priority LOW 24

Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to perform actions as adminis…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01885 Published 2008-01-10 No fix listed CWE-79
Open these records in search →