agentprime: wordpress-developEvery new CVE for wordpress-develop.https://agentprime.io/CVE-2024-31211: Remote Code Execution in `WP_HTML_Token`https://agentprime.io/advisories/CVE-2024-31211/https://agentprime.io/advisories/CVE-2024-31211/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 23:00:17 GMTCVECVE-2024-31210: PHP file upload bypass via Plugin installerhttps://agentprime.io/advisories/CVE-2024-31210/https://agentprime.io/advisories/CVE-2024-31210/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 22:59:28 GMTCVECVE-2022-21662: Stored XSS in WordPresshttps://agentprime.io/advisories/CVE-2022-21662/https://agentprime.io/advisories/CVE-2022-21662/CVSS 8.0 (High). Critical: CVSS score 8.0 (7.0 or more) and EPSS 0.65 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jan 2022 23:05:10 GMTCVEcriticalCVE-2022-21663: Authenticated Object Injection in Multisites in WordPresshttps://agentprime.io/advisories/CVE-2022-21663/https://agentprime.io/advisories/CVE-2022-21663/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jan 2022 23:00:11 GMTCVECVE-2022-21664: SQL injection in WordPresshttps://agentprime.io/advisories/CVE-2022-21664/https://agentprime.io/advisories/CVE-2022-21664/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jan 2022 22:55:09 GMTCVECVE-2022-21661: SQL injection in WordPresshttps://agentprime.io/advisories/CVE-2022-21661/https://agentprime.io/advisories/CVE-2022-21661/CVSS 8.0 (High). Critical: CVSS score 8.0 (7.0 or more) and EPSS 0.98 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jan 2022 22:50:11 GMTCVEcriticalCVE-2021-39203: Private data disclosure/privilege escalation through the block editor in Wordpresshttps://agentprime.io/advisories/CVE-2021-39203/https://agentprime.io/advisories/CVE-2021-39203/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Sep 2021 22:00:11 GMTCVECVE-2021-39202: WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widgethttps://agentprime.io/advisories/CVE-2021-39202/https://agentprime.io/advisories/CVE-2021-39202/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Sep 2021 21:55:11 GMTCVECVE-2021-39201: Authenticated cross-site scripting (XSS) in WordPress editorhttps://agentprime.io/advisories/CVE-2021-39201/https://agentprime.io/advisories/CVE-2021-39201/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Sep 2021 21:35:08 GMTCVECVE-2021-39200: Information Disclosure in wp_die() via JSONP in wordpresshttps://agentprime.io/advisories/CVE-2021-39200/https://agentprime.io/advisories/CVE-2021-39200/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Sep 2021 21:25:09 GMTCVECVE-2021-29450: WordPress Authenticated disclosure of password-protected posts and pageshttps://agentprime.io/advisories/CVE-2021-29450/https://agentprime.io/advisories/CVE-2021-29450/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Apr 2021 21:20:10 GMTCVECVE-2021-29447: WordPress Authenticated XXE attack when installation is running PHP 8https://agentprime.io/advisories/CVE-2021-29447/https://agentprime.io/advisories/CVE-2021-29447/CVSS 7.1 (High). Critical: CVSS score 7.1 (7.0 or more) and EPSS 0.86 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Apr 2021 21:10:12 GMTCVEcriticalCVE-2020-4047: Authenticated XSS via media attachment page in WordPresshttps://agentprime.io/advisories/CVE-2020-4047/https://agentprime.io/advisories/CVE-2020-4047/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2020 16:00:36 GMTCVECVE-2020-4048: Open redirect in wp_validate_redirect() in WordPresshttps://agentprime.io/advisories/CVE-2020-4048/https://agentprime.io/advisories/CVE-2020-4048/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2020 16:00:30 GMTCVECVE-2020-4049: Authenticated self-XSS via theme uploads in WordPresshttps://agentprime.io/advisories/CVE-2020-4049/https://agentprime.io/advisories/CVE-2020-4049/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2020 16:00:23 GMTCVECVE-2020-4050: set-screen-option filter misuse by plugins leading to privilege escalation in WordPresshttps://agentprime.io/advisories/CVE-2020-4050/https://agentprime.io/advisories/CVE-2020-4050/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2020 16:00:17 GMTCVECVE-2020-4046: Authenticated XSS through embed block in WordPresshttps://agentprime.io/advisories/CVE-2020-4046/https://agentprime.io/advisories/CVE-2020-4046/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2020 15:55:12 GMTCVE