WordPress.org
- Products in analyzed data
- 2
- Catalog vulnerabilities
- 6
Severity across 6 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 6 analyzed records
A short verification protects source data and prevents automated AI requests.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2025-64253WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability | Exploitation statusNot known exploited | FixYes | Affected productHealth Check & Troubleshooting | Published12/16/2025 | SeverityMedium |
CVE-2023-39999WordPress < 6.3.2 is vulnerable to Broken Access Control | Exploitation statusNot confirmed | FixYes | Affected productWordPress | Published10/13/2023 | SeverityMedium |
CVE-2023-38000Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block | Exploitation statusNot confirmed | FixYes | Affected productWordPress | Published10/13/2023 | SeverityMedium |
CVE-2022-43504CVE-2022-43504 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWordPress | Published12/05/2022 | SeverityMedium |
CVE-2022-43500CVE-2022-43500 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWordPress | Published12/05/2022 | SeverityMedium |
CVE-2022-43497CVE-2022-43497 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWordPress | Published12/05/2022 | SeverityMedium |