WordPress 3.9.39 Vulnerabilities

Vulnerabilities 2

Low 3.7

2026-03-10

WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload

High 7.2

2018-08-10

CVE-2018-14028