agentprime: wordpressEvery new CVE for wordpress.https://agentprime.io/CVE-2026-119977: WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-119977/https://agentprime.io/advisories/CVE-2026-119977/CVSS 8.1 (High). Critical: In CISA’s KEV catalogue since 3 Nov 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 05:33:07 GMTCVEcriticalKEVCVE-2026-114570: WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edithttps://agentprime.io/advisories/CVE-2026-114570/https://agentprime.io/advisories/CVE-2026-114570/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 05:29:48 GMTCVECVE-2026-87902: PHP file inclusion in WordPresshttps://agentprime.io/advisories/CVE-2026-87902/https://agentprime.io/advisories/CVE-2026-87902/CVSS 8.1 (High). Critical: In CISA’s KEV catalogue since 25 Sept 2026: it is known to be exploited. CVSS score 8.1 (7.0 or more) and EPSS 0.96 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 16:44:15 GMTCVEcriticalKEVCVE-2026-65640: Unrestricted file upload in WordPresshttps://agentprime.io/advisories/CVE-2026-65640/https://agentprime.io/advisories/CVE-2026-65640/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 20:55:33 GMTCVECVE-2026-64638: Cross-site scripting in WordPresshttps://agentprime.io/advisories/CVE-2026-64638/https://agentprime.io/advisories/CVE-2026-64638/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 18:02:07 GMTCVECVE-2026-63030: WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-63030/https://agentprime.io/advisories/CVE-2026-63030/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 21 Jul 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 19:14:12 GMTCVEcriticalKEVCVE-2026-60137: WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Queryhttps://agentprime.io/advisories/CVE-2026-60137/https://agentprime.io/advisories/CVE-2026-60137/CVSS 5.9 (Medium). Critical: In CISA’s KEV catalogue since 21 Jul 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 19:14:12 GMTCVEcriticalKEVCVE-2026-3906: WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST APIhttps://agentprime.io/advisories/CVE-2026-3906/https://agentprime.io/advisories/CVE-2026-3906/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 09:25:44 GMTCVECVE-2025-58674: WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-58674/https://agentprime.io/advisories/CVE-2025-58674/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Sep 2025 18:47:02 GMTCVECVE-2025-58246: WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-58246/https://agentprime.io/advisories/CVE-2025-58246/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Sep 2025 17:17:12 GMTCVECVE-2025-54352: WordPress: WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft…https://agentprime.io/advisories/CVE-2025-54352/https://agentprime.io/advisories/CVE-2025-54352/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Jul 2025 00:00:00 GMTCVECVE-2022-4973: WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); functionhttps://agentprime.io/advisories/CVE-2022-4973/https://agentprime.io/advisories/CVE-2022-4973/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Oct 2024 06:43:41 GMTCVECVE-2024-6307: WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML APIhttps://agentprime.io/advisories/CVE-2024-6307/https://agentprime.io/advisories/CVE-2024-6307/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 11:09:23 GMTCVECVE-2024-4439: Cross-site scripting in WordPresshttps://agentprime.io/advisories/CVE-2024-4439/https://agentprime.io/advisories/CVE-2024-4439/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.71 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 May 2024 05:32:34 GMTCVEcriticalCVE-2023-5692: WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalinkhttps://agentprime.io/advisories/CVE-2023-5692/https://agentprime.io/advisories/CVE-2023-5692/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 12:52:32 GMTCVECVE-2023-5561: WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosurehttps://agentprime.io/advisories/CVE-2023-5561/https://agentprime.io/advisories/CVE-2023-5561/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 19:39:10 GMTCVECVE-2023-39999: WordPress < 6.3.2 is vulnerable to Broken Access Controlhttps://agentprime.io/advisories/CVE-2023-39999/https://agentprime.io/advisories/CVE-2023-39999/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Oct 2023 11:31:16 GMTCVECVE-2023-38000: Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Blockhttps://agentprime.io/advisories/CVE-2023-38000/https://agentprime.io/advisories/CVE-2023-38000/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Oct 2023 09:55:54 GMTCVECVE-2023-2745: WordPress Core < 6.2.1 - Directory Traversalhttps://agentprime.io/advisories/CVE-2023-2745/https://agentprime.io/advisories/CVE-2023-2745/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 May 2023 08:36:44 GMTCVECVE-2022-3590: WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebindinghttps://agentprime.io/advisories/CVE-2022-3590/https://agentprime.io/advisories/CVE-2022-3590/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Dec 2022 08:33:40 GMTCVECVE-2022-43504: Improper authentication in WordPresshttps://agentprime.io/advisories/CVE-2022-43504/https://agentprime.io/advisories/CVE-2022-43504/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Dec 2022 00:00:00 GMTCVECVE-2022-43500: Cross-site scripting in WordPresshttps://agentprime.io/advisories/CVE-2022-43500/https://agentprime.io/advisories/CVE-2022-43500/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Dec 2022 00:00:00 GMTCVECVE-2022-43497: Cross-site scripting in WordPresshttps://agentprime.io/advisories/CVE-2022-43497/https://agentprime.io/advisories/CVE-2022-43497/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Dec 2022 00:00:00 GMTCVECVE-2011-1762: Improper access control in wordpresshttps://agentprime.io/advisories/CVE-2011-1762/https://agentprime.io/advisories/CVE-2011-1762/Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Apr 2022 16:20:38 GMTCVECVE-2020-11026: Specially crafted filenames in WordPress leading to XSShttps://agentprime.io/advisories/CVE-2020-11026/https://agentprime.io/advisories/CVE-2020-11026/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2020 22:15:32 GMTCVECVE-2020-11028: Unauthenticated disclosure of certain private posts in WordPresshttps://agentprime.io/advisories/CVE-2020-11028/https://agentprime.io/advisories/CVE-2020-11028/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2020 22:15:23 GMTCVECVE-2020-11029: Cross-site scripting in stats method (object cache) in WordPresshttps://agentprime.io/advisories/CVE-2020-11029/https://agentprime.io/advisories/CVE-2020-11029/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2020 22:15:18 GMTCVECVE-2020-11030: Cross-site scripting (XSS) in Search block in WordPresshttps://agentprime.io/advisories/CVE-2020-11030/https://agentprime.io/advisories/CVE-2020-11030/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2020 22:15:14 GMTCVECVE-2020-11025: Authenticated cross-site scripting (XSS) in WordPress Customizerhttps://agentprime.io/advisories/CVE-2020-11025/https://agentprime.io/advisories/CVE-2020-11025/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2020 22:10:11 GMTCVECVE-2020-11027: Password reset links invalidation issue in WordPresshttps://agentprime.io/advisories/CVE-2020-11027/https://agentprime.io/advisories/CVE-2020-11027/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2020 00:00:00 GMTCVECVE-2019-16781: Stored cross-site scripting (XSS) in WordPress block editorhttps://agentprime.io/advisories/CVE-2019-16781/https://agentprime.io/advisories/CVE-2019-16781/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Dec 2019 17:00:17 GMTCVECVE-2019-16780: Stored cross-site scripting (XSS) in WordPress block editorhttps://agentprime.io/advisories/CVE-2019-16780/https://agentprime.io/advisories/CVE-2019-16780/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Dec 2019 16:50:13 GMTCVE