An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for both the server and th…

WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript in use on the server * A malicious user …

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query

WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability

WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability

WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests. NOTE: the Supplier is not changing this behavior.

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for …

Remote Code Execution in `WP_HTML_Token`

PHP file upload bypass via Plugin installer

WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure

WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

Stored XSS in WordPress

Authenticated Object Injection in Multisites in WordPress

SQL injection in WordPress

SQL injection in WordPress

Private data disclosure/privilege escalation through the block editor in Wordpress

WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget

Authenticated cross-site scripting (XSS) in WordPress editor

Information Disclosure in wp_die() via JSONP in wordpress

WordPress Authenticated disclosure of password-protected posts and pages

WordPress Authenticated XXE attack when installation is running PHP 8

Authenticated XSS via media attachment page in WordPress

Open redirect in wp_validate_redirect() in WordPress

Authenticated self-XSS via theme uploads in WordPress

set-screen-option filter misuse by plugins leading to privilege escalation in WordPress

Authenticated XSS through embed block in WordPress

Specially crafted filenames in WordPress leading to XSS

Unauthenticated disclosure of certain private posts in WordPress

Cross-site scripting in stats method (object cache) in WordPress