Browse / WordPress

WordPress

See its reports on the map

What gets reported to WordPress

• Cross-site Scripting39
• Access Control16
• Misconfiguration11
• Information Disclosure8
• Cross-Site Request Forgery6
• Path Traversal3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Wordpress 4.8.1 - Rogue editor leads to RCE. And the risks of same origin frame scripting in generalInformativeCode Injection · high
   4 votes
2. antispambot does not always escape <, >, &, " and 'InformativeCross-site Scripting (XSS) - Generic · low
   3 votes
3. Stored XSS in WordPressInformativeCross-site Scripting (XSS) - Stored · medium
   3 votes
4. Clickjacking irclogs.wordpress.orgInformativeUI Redressing (Clickjacking)
   2 votes
5. UnResolved ChangeSet are Visible to Public That also Causes Information DisclosureInformativeInformation Disclosure
   1 votes