Browse / WordPress

WordPress

See its reports on the map

What gets reported to WordPress

• Cross-site Scripting39
• Access Control16
• Misconfiguration11
• Information Disclosure8
• Cross-Site Request Forgery6
• Path Traversal3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Unauthenticated WordPress Database Repair DoSN/AUncontrolled Resource Consumption · high
   70 votes
2. Open API For Username enumerationN/AInformation Disclosure · low
   25 votes
3. Stored XSS on Wordpress 5.3 via Title PostN/ACross-site Scripting (XSS) - Stored · high
   9 votes
4. Account takeover vulnerability by editor role privileged users/attackers via clickjackingN/AUI Redressing (Clickjacking) · high
   8 votes
5. CSRF on comment postN/ACross-Site Request Forgery (CSRF) · medium
   5 votes
6. Administrator(s) Information disclosure via JSON on wordpress.orgN/AInformation Disclosure · medium
   4 votes
7. WordPress Automatic Update Protocol Does Not Authenticate Updates Provided by the ServerN/ACryptographic Issues - Generic · high
   2 votes