Sploitus

232 exploited vulnerabilities in Wordpress

Showing 1โ€“50 of 232, highest-scoring first

Vendors
Bitnami, Unknown, WordPress, Alt Linux, Linux Mint, Php
With known exploits
232
Affected Meowapps Ai Engine versions
< 1.9.99
Affected Phpmailer Project Phpmailer versions
< 5.2.18
Affected Wordpress versions
= 0.71, 0.72, 0.711, 1.0, 1.0.1, 1.2, 1.2.1, 1.2.2, 1.5, 1.5.1, 1.5.1.3, 1.5.2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.9, 2.0.10, 2.0.11, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.3, 2.3.1, 2.3.2, 2.5, 2.5.1, 2.6, 2.6.1, 2.6.2, 2.6.3, 6.9.5, 7.0.2, 6.4.2, 5.8, 5.5.2, 4.9.9, 5.0.1, 4.8.1, 6.8.6, 5.1.1, 2.3.3, 0.6.2, 0.6.2.1, 0.7, 0.71-gold, 1.0-platinum, 1.0.1-miles, 1.0.2, 1.0.2-blakey, 1.2-delta, 1.2-mingus, 1.3.1, 1.4, 1.5-strayhorn, 1.5.1.1, 1.5.1.2, 1.6, 2.0.8, 4.1.40, 4.2.37, 4.3.33, 4.4.32, 4.5.31, 4.6.28, 4.7.28, 4.8.24, 4.9.25, 5.0.21, 5.1.18, 5.2.20, 5.3.17, 5.4.15, 5.5.14, 5.6.13, 5.7.11, 5.8.9, 5.9.9, 6.0.7, 6.1.5, 6.2.4, 6.3.3, 6.4.3, 5.0, 4.9.7, 4.7.4, 4.4.1
Affected Valvepress Automatic versions
โ‰ค 3.92.0
Affected Goodlayers Good Learning Management System versions
โ‰ค 2.1.4
Affected Calmar-webmedia Total Donations versions
โ‰ค 2.0.5
Affected Wp-pdf Pdf Embedder versions
= 4.4
Affected Tribulant Slideshow Gallery versions
= 1.6.8

Vulnerabilities with exploits

Highest CVSS first โ€” 26 of these already have exploit code on Sploitus

CVE-2025-41240
CVSS 10.0 CRITICAL 2025-07-23FIX AVAILABLE
CVE-2023-51409 4 exploits
CVSS 10.0 CRITICAL 2024-01-09FIX AVAILABLE
๐Ÿ“„ WordPress AI Engine: ChatGPT Chatbot 1.9.98 Shell Upload๐Ÿ“„ WordPress AI Engine 3.0.0 Shell Upload
CVE-2016-10033 58 exploits
CVSS 10.0 CRITICAL 2016-12-29FIX AVAILABLE
Exploit for Argument Injection in Phpmailer_Project PhpmailerExploit for Argument Injection in Phpmailer_Project Phpmailer
CVE-2009-2853 2 exploits
CVSS 10.0 HIGH 2009-08-18FIX AVAILABLE
WordPress 2.8.3 RCEWordPress wp-admin้žๆŽˆๆƒ็ฎก็†่ฎฟ้—ฎๆผๆดž
CVE-2008-6767
CVSS 10.0 HIGH 2009-04-28FIX AVAILABLE
CVE-2024-27956 16 exploits
CVSS 9.9 CRITICAL 2024-02-25FIX AVAILABLE
Exploit for SQL Injection in Valvepress AutomaticExploit for SQL Injection in Valvepress Automatic
CVE-2026-63030 60 exploits
CVSS 9.8 CRITICAL 2026-07-17FIX AVAILABLE
๐Ÿ“„ WordPress 7.0.1 Remote Code ExecutionExploit for Interpretation Conflict in Wordpress
CVE-2024-31211 1 exploit
CVSS 9.8 CRITICAL 2024-04-04FIX AVAILABLE
Exploit for CVE-2024-31211
CVE-2021-44223
CVSS 9.8 CRITICAL 2021-11-25FIX AVAILABLE
CVE-2020-27481 1 exploit
CVSS 9.8 CRITICAL 2020-11-12FIX AVAILABLE
Good LMS < 2.1.5 - Unauthenticated SQL Injection
CVE-2020-28032 1 exploit
CVSS 9.8 CRITICAL 2020-10-15FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Wordpress
CVE-2019-6703
CVSS 9.8 CRITICAL 2019-01-27FIX AVAILABLE
CVE-2019-19589
CVSS 9.8 CRITICAL 2019-12-05FIX AVAILABLE
CVE-2018-18018
CVSS 9.8 CRITICAL 2019-04-15FIX AVAILABLE
CVE-2018-3810 4 exploits
CVSS 9.8 CRITICAL 2018-01-01FIX AVAILABLE
WordPress Smart Google Code Inserter Plugin < 3.5 - Authentication Bypass / SQL InjectionWordPress Plugin Smart Google Code Inserter 3.5 - Authentication Bypass SQL Injection
CVE-2018-20148
CVSS 9.8 CRITICAL 2018-12-14FIX AVAILABLE
CVE-2017-14723
CVSS 9.8 CRITICAL 2017-09-23FIX AVAILABLE
CVE-2017-1002002 3 exploits
CVSS 9.8 CRITICAL 2017-09-14FIX AVAILABLE
WordPress Multiple Plugin File UploadWordPress Multiple Plugins - Arbitrary File Upload
CVE-2017-1002000 3 exploits
CVSS 9.8 CRITICAL 2017-09-14
WordPress Multiple Plugin File UploadWordPress Multiple Plugins - Arbitrary File Upload
CVE-2007-6013
CVSS 9.8 CRITICAL 2007-11-19FIX AVAILABLE
CVE-2026-60137 44 exploits
CVSS 9.4 HIGH 2026-07-17FIX AVAILABLE
๐Ÿ“„ WordPress 7.0.1 Remote Code ExecutionExploit for Interpretation Conflict in Wordpress
CVE-2019-10673 2 exploits
CVSS 9.3 HIGH 2019-04-03FIX AVAILABLE
WordPress Ultimate Member 2.0.38 Cross Site Request Forgery VulnerabilityWordPress Ultimate Member 2.0.38 Cross Site Request Forgery
CVE-2019-9787 3 exploits
CVSS 9.3 HIGH 2019-03-14FIX AVAILABLE
Exploit for Cross-Site Request Forgery (CSRF) in WordpressExploit for Cross-Site Request Forgery (CSRF) in Wordpress
CVE-2008-4769 1 exploit
CVSS 9.3 HIGH 2008-10-28FIX AVAILABLE
WordPress Core 2.3.3 - 'cat' Directory Traversal
CVE-2026-5144
CVSS 8.8 HIGH 2026-04-11FIX AVAILABLE
CVE-2024-31210
CVSS 8.8 HIGH 2024-04-04FIX AVAILABLE
CVE-2020-8658 1 exploit
CVSS 8.8 HIGH 2020-02-06FIX AVAILABLE
Htaccess by BestWebSoft < 1.8.2 - CSRF to edit .htaccess
CVE-2020-28339
CVSS 8.8 HIGH 2020-11-07FIX AVAILABLE
CVE-2019-8942 8 exploits
CVSS 8.8 HIGH 2019-02-20FIX AVAILABLE
Exploit for Unrestricted Upload of File with Dangerous Type in WordpressExploit for Unrestricted Upload of File with Dangerous Type in Wordpress
CVE-2019-1000003 1 exploit
CVSS 8.8 HIGH 2019-02-04FIX AVAILABLE
MapSVG Lite <= 3.2.3 - Cross-Site Request Forgery (CSRF)
CVE-2016-10945
CVSS 8.8 HIGH 2019-09-13FIX AVAILABLE
CVE-2018-5656
CVSS 8.8 HIGH 2018-01-13FIX AVAILABLE
CVE-2018-12895 3 exploits
CVSS 8.8 HIGH 2018-06-26FIX AVAILABLE
Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) ExploitWordpress 4.9.6 - Arbitrary File Deletion (Authenticated) (2)
CVE-2017-9064
CVSS 8.8 HIGH 2017-05-18FIX AVAILABLE
CVE-2026-28507
CVSS 8.6 HIGH 2026-03-02FIX AVAILABLE
CVE-2017-9062
CVSS 8.6 HIGH 2017-05-18FIX AVAILABLE
CVE-2016-2222
CVSS 8.6 HIGH 2016-02-08FIX AVAILABLE
CVE-2020-11027 3 exploits
CVSS 8.5 HIGH 2020-04-30FIX AVAILABLE
WordPress Theme Medic 1.0.0 Weak Password Recovery MechanismWordPress Medic Theme v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password Exploit
CVE-2008-5695 1 exploit
CVSS 8.5 HIGH 2008-12-19FIX AVAILABLE
WordPress MU < 1.3.2 - 'active_plugins' Code Execution
CVE-2026-4248
CVSS 8.0 HIGH 2026-03-27FIX AVAILABLE
CVE-2022-21662
CVSS 8.0 HIGH 2022-01-06FIX AVAILABLE
CVE-2022-21661 13 exploits
CVSS 8.0 HIGH 2022-01-06FIX AVAILABLE
Exploit for SQL Injection in WordpressExploit for SQL Injection in Wordpress
CVE-2021-42360
CVSS 7.6 HIGH 2021-11-17
CVE-2020-36848 1 exploit
CVSS 7.5 HIGH 2025-07-12FIX AVAILABLE
WordPress Total Upkeep Unauthenticated Backup Downloader
CVE-2020-11497 3 exploits
CVSS 7.5 HIGH 2020-08-26
WordPress NAB Transact WooCommerce 2.1.0 Payment Bypass VulnerabilityWooCommerce - NAB Transact < 2.1.2 - Payment Bypass
CVE-2019-20209 3 exploits
CVSS 7.5 HIGH 2020-01-13FIX AVAILABLE
EasyBook < 1.2.2 - Multiple VulnerabilitiesTownHub < 1.0.6 - Multiple Vulnerabilities
CVE-2018-6389 11 exploits
CVSS 7.5 HIGH 2018-02-06FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_PlatformExploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform
CVE-2018-20151
CVSS 7.5 HIGH 2018-12-14FIX AVAILABLE
CVE-2017-9065
CVSS 7.5 HIGH 2017-05-18FIX AVAILABLE
CVE-2017-1002006
CVSS 7.5 HIGH 2017-09-14FIX AVAILABLE