WordPress 3.7.40 Vulnerabilities

Vulnerabilities 2

Low 3.7

2026-03-10

WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload

High 7.2

2018-08-10

CVE-2018-14028