WordPress

Records428All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical33CVSS 9.0–10.0

CVSS high101CVSS 7.0–8.9

Exploited now

WordPress records in CISA KEV

TI-2026-83466 WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability CRITICAL 94KEV 2026-11-03 TI-2026-59973 WordPress Core Remote File Inclusion Vulnerability CRITICAL 94KEV 2026-09-25 TI-2026-42844 WordPress Core SQL Injection Vulnerability CRITICAL 86KEV 2026-07-21 TI-2026-45010 WordPress Core Interpretation Conflict Vulnerability CRITICAL 100KEV 2026-07-21 TI-2016-08118 PHPMailer Command Injection Vulnerability CRITICAL 100KEV 2025-07-07 TI-2019-07343 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Wordpress 357 records CRITICAL Wordpress Mu 10 records MEDIUM Sniplets Plugin 3 records MEDIUM Blix 2 records LOW Math Comment Spam Protection Plugin 2 records LOW Pay-with-tweet 2 records LOW Wassup Plugin 2 records LOW Adserve 1 record LOW

Records

2 records in Wassup Plugin · all components

TI-2008-00492 CVE-2008-0520 · GHSA-vmrm-3gr2-66vg

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3…

LOW 38

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) from_date or (2) to_date parameter to spy.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02851 Published 2008-01-31 No fix listed CWE-89

TI-2012-02274 CVE-2012-2633 · GHSA-w4gw-5v3x-53hr

Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before…

LOW 24

Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02096 Published 2012-06-15 No fix listed CWE-79

Open these records in search →

Critical	33
High	101
Medium	274
Low	20
No CVSS	0