Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: wordpress-develop — DSA-5039 Clear all filters
TI-2022-06040 CVE-2022-21662

Stored XSS in WordPress

Priority HIGH 73

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.64529 Published 2022-01-06 Fixed in 5.8.3 CWE-79
TI-2022-06042 CVE-2022-21664

SQL injection in WordPress

Priority MEDIUM 44

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03674 Published 2022-01-06 Fixed in 5.8.3 CWE-89
TI-2022-06039 CVE-2022-21661

SQL injection in WordPress

Priority HIGH 81

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.97795 Published 2022-01-06 Fixed in 5.8.3 CWE-89