Read the docs

WordPress

Records428All Threatist records
Exploited (KEV)8In CISA KEV
CVSS critical33CVSS 9.0–10.0
CVSS high101CVSS 7.0–8.9

Exploited now

WordPress records in CISA KEV
TI-2026-83466 WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability Priority CRITICAL 94KEV 2026-11-03TI-2026-59973 WordPress Core Remote File Inclusion Vulnerability Priority CRITICAL 94KEV 2026-09-25TI-2026-42844 WordPress Core SQL Injection Vulnerability Priority CRITICAL 86KEV 2026-07-21TI-2026-45010 WordPress Core Interpretation Conflict Vulnerability Priority CRITICAL 100KEV 2026-07-21TI-2016-08118 PHPMailer Command Injection Vulnerability Priority CRITICAL 100KEV 2025-07-07TI-2019-07343 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability Priority HIGH 84KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Wordpress 357 records CRITICAL Wordpress Mu 10 records MEDIUM Sniplets Plugin 3 records MEDIUM Blix 2 records LOW Math Comment Spam Protection Plugin 2 records LOW Pay-with-tweet 2 records LOW Wassup Plugin 2 records LOW Adserve 1 record LOW

Records

2 records in Pay-with-tweet · all components

TI-2012-04524 CVE-2012-5350 · GHSA-gq2x-c84j-9245

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows…

Priority LOW 31

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortc…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.02374 Published 2012-10-09 No fix listed CWE-89
Open these records in search →