WordPress 6.2.1 Vulnerabilities

Medium 5.9

2026-03-10

WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload

Wordfence Wordfence Wordfence Wordfence Wordfence CVE CVE EUVD EUVD Wordfence Wordfence CVE EUVD Patchstack

Medium 5.0

2024-06-25

CVE-2024-32111

CVE Wordfence

Medium 6.5

2024-06-25

CVE-2024-31111

CVE Wordfence

Medium 6.4

2024-06-25

CVE-2024-6307

CVE Wordfence

N/A

2024-06-25

WordPress is vulnerable to Cross Site Scripting (XSS)

Patchstack

Medium 6.1

2024-05-03

CVE-2024-4439

CVE Wordfence

Medium 5.3

2024-04-05

CVE-2023-5692

CVE Wordfence

High 8.8

2024-04-04

CVE-2024-31210

CVE

Medium 5.3

2023-10-16

CVE-2023-5561

CVE Wordfence

Medium 6.5

2023-10-13

CVE-2023-38000

CVE Wordfence

Medium 4.3

2023-10-13

CVE-2023-39999

CVE Wordfence

N/A

2023-10-12

WordPress Core 4.7.0-6.3.1 - Denial of Service via Cache Poisoning

Wordfence

N/A

2023-10-12

WordPress Core < 6.3.2 – Authenticated (Subscriber+) Arbitrary Shortcode Execution via parse-media-shortcode

Wordfence

N/A

2023-10-12

WordPress Core 5.6 - 6.3.1 - Reflected Cross-Site Scripting via Application Password Requests

Wordfence

N/A

2023-05-19

WordPress Core < 6.2.2 - Shortcode Execution in User Generated Content

Wordfence

High 7.2

2018-08-10

CVE-2018-14028

CVE