WordPress 5.4.15 Vulnerabilities

Vulnerabilities 3

Medium 5.9

2026-03-10

WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload

Medium 5.0

2024-06-25

CVE-2024-32111

N/A

2024-06-25

WordPress is vulnerable to Cross Site Scripting (XSS)