Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
WordPress Number Of NVD 349 CRITICAL 17 HIGH 79 MEDIUM 235 LOW 18
URL https://wordpress.org/
Explanation It is an open source blogging software written in PHP.
It can be used not only for blogs, but also for personal and corporate web sites, and offers a large number of additional features and good-looking themes.
It may be the most used Content Management System (CMS) in the world.

There are many plugins, and if you have enough knowledge, you can build a site that can be used for commercial purposes.
However, since there are some vulnerabilities caused by plugins, you need to carefully select the right plugin to use.

Since security updates are not made for other than the latest version, it is officially announced that older versions cannot be used safely.
In some cases, security issues are fixed for older versions.
Since there are many plugins (additional functions) available for WordPress, you need to check each plugin for vulnerabilities and new versions.
Tag
  • PHP
  • オープンソース
  • GPL v2
Add Information URL
No Type Name URL
1 https://ja.wordpress.org/download/
2 https://github.com/wordpress/wordpress
3 https://wordpress.org/download/releases/
4 https://ja.wordpress.org/download/releases/
5 https://ja.wordpress.org/about/history/
6 https://wordpress.org/news/category/releases/
7 https://ja.wordpress.org/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
291 wordpress 6 6.8.3 Sept. 30, 2025 Nov. 2, 2022 0 0 10 0
292 wordpress 5.9 5.9.5 Oct. 17, 2022 Jan. 25, 2022 0 0 10 0
293 wordpress 5.8 5.8.1 Sept. 9, 2021 July 21, 2021 0 3 13 0
294 wordpress 5.7 5.7.3 Sept. 9, 2021 March 10, 2021 2 4 14 0
295 WordPress 5.6 5.6.5 Sept. 9, 2021 Dec. 8, 2020 2 4 14 0
296 WordPress 5.5 5.5.6 Sept. 9, 2021 Aug. 11, 2020 7 5 16 0
297 WordPress 5.4 5.4.7 Sept. 9, 2021 April 28, 2020 7 7 24 2
298 WordPress 5.3 5.3.9 Sept. 11, 2021 Nov. 21, 2019 8 7 27 2
299 WordPress 5.2 5.2.12 Sept. 9, 2021 May 19, 2019 10 9 38 2
300 WordPress 5.1 5.1.11 Sept. 22, 2021 March 11, 2019 10 10 37 2
301 WordPress 5.0 5.0.14 Sept. 22, 2021 Dec. 10, 2018 11 12 43 2
302 WordPress 4.9 4.9.18 May 12, 2021 Nov. 17, 2017 11 17 49 2
303 WordPress 4.8 4.8.17 May 12, 2021 June 23, 2017 13 20 57 2
304 WordPress 4.7 4.7.18 June 11, 2020 Dec. 7, 2016 16 28 72 2
305 WordPress 4.6 4.6.19 June 11, 2020 Aug. 17, 2016 16 26 70 2
306 WordPress 4.5 4.5.22 June 11, 2020 April 14, 2016 16 33 76 2
307 WordPress 4.4 4.4.23 June 11, 2020 Dec. 9, 2015 16 36 78 2
308 WordPress 4.3 4.3.24 June 11, 2020 Aug. 19, 2015 16 36 81 2
309 WordPress 4.2 4.2.28 June 11, 2020 April 28, 2015 16 37 89 3
310 WordPress 4.1 4.1.31 June 11, 2020 Dec. 19, 2014 16 37 91 3
311 wordpress 4.0 4.0.38 Dec. 15, 2014 Dec. 15, 2014 16 37 97 3
312 WordPress 3.9 3.9.40 Nov. 30, 2022 April 17, 2014 16 38 102 4
313 WordPress 3.8 3.8.41 Nov. 30, 2022 Dec. 16, 2013 16 37 102 4
314 WordPress 3.7 3.7.5 Nov. 30, 2022 Oct. 25, 2013 16 37 102 4
315 wordpress 3.6 3.6.1 Sept. 11, 2013 Aug. 1, 2013 Jan. 1, 2000 15 37 94 4
316 wordpress 3.5 3.5.2 June 21, 2013 Nov. 11, 2012 Jan. 1, 2000 15 37 105 4
317 wordpress 3.4 3.4.2 Sept. 6, 2012 June 13, 2012 Jan. 1, 2000 15 37 108 7
318 wordpress 3.3 3.3.3 June 27, 2012 Dec. 12, 2011 Jan. 1, 2000 15 40 119 6
319 wordpress 3.2 3.2.1 July 12, 2011 July 4, 2011 Jan. 1, 2000 15 44 122 5
320 wordpress 3.1 3.1.4 June 29, 2011 Feb. 23, 2011 Jan. 1, 2000 15 44 125 5
321 wordpress 3.0 3.0.6 April 26, 2011 June 17, 2010 Jan. 1, 2000 15 40 132 7
322 wordpress 2.9 2.9.2 Feb. 15, 2010 Dec. 18, 2009 Jan. 1, 2000 15 39 133 7
323 wordpress 2.8 2.8.6 Nov. 12, 2009 June 11, 2009 Jan. 1, 2000 15 41 137 8
324 wordpress 2.7 2.7.1 Feb. 10, 2009 Dec. 10, 2008 Jan. 1, 2000 15 41 140 8
325 wordpress 2.6 2.6.5 Nov. 25, 2008 July 15, 2008 Jan. 1, 2000 15 44 143 8
326 wordpress 2.5 2.5.1 April 25, 2008 March 29, 2008 Jan. 1, 2000 15 46 143 8
327 wordpress 2.3 2.3.3 Feb. 5, 2008 Sept. 25, 2007 Jan. 1, 2000 16 46 147 9
328 wordpress 2.2 2.2.3 Sept. 24, 2007 Sept. 24, 2007 Jan. 1, 2000 16 48 158 9
329 wordpress 2.1 2.1.3 Sept. 24, 2007 Sept. 24, 2007 Jan. 1, 2000 16 51 157 9
330 wordpress 2.0 2.0.9 Sept. 24, 2007 Sept. 24, 2007 Jan. 1, 2000 16 55 180 9
331 wordpress 1.5 1.5.2 Sept. 24, 2007 Sept. 24, 2007 Jan. 1, 2000 16 58 173 8
332 wordpress 1.2 1.2.5 Sept. 24, 2007 Sept. 24, 2007 Jan. 1, 2000 15 55 175 8
333 wordpress 1.6 1.6.2 Jan. 1, 2000 16 49 161 8
334 wordpress 1.3 1.3.3 Jan. 1, 2000 15 49 164 8
335 wordpress 1.1 1.1.1 Jan. 1, 2000 15 49 163 8
336 wordpress 1.0 1.0.2 Sept. 24, 2007 Jan. 1, 2000 15 53 169 8
337 wordpress 0.72 0.72 Jan. 1, 2000 15 51 163 8
338 wordpress 0.711 0.711 Jan. 1, 2000 15 51 163 8
339 wordpress 0.71 0.71 Sept. 24, 2007 Jan. 1, 2000 15 53 167 8
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
291 -
2.1 		LOW Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin… NVD-CWE-Other
CVE-2007-4153 cpe:2.3:a:wordpress:wordpress:2.2.1:* 2026-04-23 09:35
2007-08-4 		Show GitHub Exploit DB Packet Storm
292 -
6.5 		MEDIUM SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (… NVD-CWE-Other
CVE-2007-4154 cpe:2.3:a:wordpress:wordpress:2.2.1:* 2026-04-23 09:35
2007-08-4 		Show GitHub Exploit DB Packet Storm
293 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2007-4139 cpe:2.3:a:wordpress:wordpress:2.2.1:* 2026-04-23 09:35
2007-08-3 		Show GitHub Exploit DB Packet Storm
294 -
4.0 		MEDIUM WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) the _wp_http_referer parameter to wp-pass.php, related to th… NVD-CWE-Other
CVE-2007-3639 cpe:2.3:a:wordpress:wordpress:*:* 2.2.1 2026-04-23 09:35
2007-07-10 		Show GitHub Exploit DB Packet Storm
295 -
6.0 		MEDIUM Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifi… NVD-CWE-Other
CVE-2007-3543 cpe:2.3:a:wordpress:wordpress:*:* 2.2.0 2026-04-23 09:35
2007-07-4 		Show GitHub Exploit DB Packet Storm
296 -
6.5 		MEDIUM Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code via unspe… NVD-CWE-Other
CVE-2007-3544 cpe:2.3:a:wordpress:wordpress:*:* 2.2.0 2026-04-23 09:35
2007-07-4 		Show GitHub Exploit DB Packet Storm
297 -
6.0 		MEDIUM Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATH_INFO (RE… NVD-CWE-Other
CVE-2007-3238 cpe:2.3:a:wordpress:wordpress:2.2:* 2026-04-23 09:35
2007-06-15 		Show GitHub Exploit DB Packet Storm
298 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in searchform.php in the AndyBlue theme before 20070607 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion … NVD-CWE-Other
CVE-2007-3239 cpe:2.3:a:wordpress:wordpress:2.2:* 2026-04-23 09:35
2007-06-15 		Show GitHub Exploit DB Packet Storm
299 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI) that accesses i… NVD-CWE-Other
CVE-2007-3240 cpe:2.3:a:wordpress:wordpress:2.2:* 2026-04-23 09:35
2007-06-15 		Show GitHub Exploit DB Packet Storm
300 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI. NVD-CWE-Other
CVE-2007-3241 cpe:2.3:a:wordpress:wordpress:2.2:* 2026-04-23 09:35
2007-06-15 		Show GitHub Exploit DB Packet Storm