en
Severity across 6 analyzed records
A short verification protects source data and prevents automated AI requests.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-3906WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API | Exploitation statusNot known exploited | FixYes | Affected productWordPress | Published03/11/2026 | SeverityMedium |
CVE-2022-4973WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function | Exploitation statusNot known exploited | FixYes | Affected productWordPress | Published10/16/2024 | SeverityMedium |
CVE-2024-6307WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API | Exploitation statusNot known exploited | FixYes | Affected productWordPress | Published06/25/2024 | SeverityMedium |
CVE-2024-4439CVE-2024-4439 | Exploitation statusNot known exploited | FixYes | Affected productWordPress | Published05/03/2024 | SeverityHigh |
CVE-2023-5692WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink | Exploitation statusNot known exploited | FixYes | Affected productWordPress | Published04/05/2024 | SeverityMedium |
CVE-2023-2745WordPress Core < 6.2.1 - Directory Traversal | Exploitation statusNot known exploited | FixYes | Affected productWordPress | Published05/17/2023 | SeverityMedium |
