WordPress wordpress-develop

• CVE-2024-31211 Medium 5.5 Remote Code Execution in `WP_HTML_Token` 2.7%
• CVE-2024-31210 High 7.7 PHP file upload bypass via Plugin installer 1.0%
• CVE-2022-21662 High 8.0 Stored XSS in WordPress 64.5%
• CVE-2022-21663 Medium 6.6 Authenticated Object Injection in Multisites in WordPress 3.8%
• CVE-2022-21664 High 7.4 SQL injection in WordPress 3.7%
• CVE-2022-21661 High 8.0 SQL injection in WordPress 97.8%
• CVE-2021-39203 Medium 6.8 Private data disclosure/privilege escalation through the block editor in Wordpress 0.9%
• CVE-2021-39202 High 7.6 WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget 0.8%
• CVE-2021-39201 High 7.6 Authenticated cross-site scripting (XSS) in WordPress editor 1.5%
• CVE-2021-39200 Medium 5.3 Information Disclosure in wp_die() via JSONP in wordpress 2.0%
• CVE-2021-29450 Medium 6.5 WordPress Authenticated disclosure of password-protected posts and pages 2.1%
• CVE-2021-29447 High 7.1 WordPress Authenticated XXE attack when installation is running PHP 8 85.7%
• CVE-2020-4047 Medium 6.8 Authenticated XSS via media attachment page in WordPress 3.3%
• CVE-2020-4048 Medium 5.7 Open redirect in wp_validate_redirect() in WordPress 2.0%
• CVE-2020-4049 Low 2.4 Authenticated self-XSS via theme uploads in WordPress 2.5%
• CVE-2020-4050 Low 3.5 set-screen-option filter misuse by plugins leading to privilege escalation in WordPress 1.4%
• CVE-2020-4046 Medium 5.4 Authenticated XSS through embed block in WordPress 2.1%