Homepage

wordpress vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the wordpress package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
Improper Input Validation

*
  • H
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2016-2222

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2016-2221

*
  • M
Access Restriction Bypass

*
  • L
Cross-site Request Forgery (CSRF)

*
  • M
Information Exposure

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
SQL Injection

*
  • H
Cross-site Scripting (XSS)

*
  • M
Improper Access Control

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Request Forgery (CSRF)

*
  • M
Improper Data Handling

*
  • M
Cryptographic Issues

*
  • M
Improper Input Validation

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Security Features

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

<3.8.2+dfsg-1ubuntu0.1
  • M
Resource Management Errors

<3.8.2+dfsg-1ubuntu0.1
  • M
Cross-site Request Forgery (CSRF)

<3.8.2+dfsg-1ubuntu0.1
  • M
Resource Management Errors

<3.8.2+dfsg-1ubuntu0.1
  • M
Cross-site Request Forgery (CSRF)

<3.8.2+dfsg-1ubuntu0.1