UpHeron

Vulnerability database · updated every 15 minutes

New vulnerabilities in the software websites run.

CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.

Free · right away or once a day · unsubscribe in one click
Tracked
39,676
Published in 7 days
994
Critical in 30 days
348
Actively exploited
422
Clear filters

Results for “wordpress”

2,746 vulnerabilities
  1. Medium 6.8

    CVE-2005-1102 · WordPress

    Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.

    Published 2 May 2005 · NVD
  2. Medium 5.0

    CVE-2004-1584 · WordPress

    CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.

    Published 31 Dec 2004 · NVD
  3. Medium 4.3

    CVE-2004-1559 · WordPress

    Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle, popupurl, content, or post_title parameters to bookmarklet.php, (4) cat_ID parameter to categories.php, (5) s parameter…

    Published 31 Dec 2004 · NVD
  4. Unrated

    WPV-f4520a4e16a2 · WP Mail Smtp (WordPress plugin)

    Vulnerability in WP Mail SMTP by WPForms – Free SMTP Plugin with Gmail, Outlook, Amazon SES, SendGrid, Mailgun, Zoho & other SMTP

    Fixed in 1.4.0 · WPVulnerability
  5. Unrated

    WPV-e8e804575098 · WP Super Cache (WordPress plugin)

    Vulnerability in WP Super Cache

    Fixed in 1.4.5 · WPVulnerability
  6. Unrated

    WPV-e159b06f2b05 · WP Super Cache (WordPress plugin)

    Vulnerability in WP Super Cache

    Fixed in 1.9 · WPVulnerability
  7. Unrated

    WPV-e0df9cafdfeb · Yith Woocommerce Wishlist (WordPress plugin)

    Vulnerability in YITH WooCommerce Wishlist

    Fixed in 2.2.0 · WPVulnerability
  8. Unrated

    WPV-ddca6e03fed8 · WPForms Lite

    Vulnerability in WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    Fixed in 1.4.8 · WPVulnerability
  9. Unrated

    WPV-dbf674a85dc2 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  10. Unrated

    WPV-d955509b0e33 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.4.1 · WPVulnerability
  11. Unrated

    WPV-cfc72fc4793b · Yoast SEO

    Vulnerability in Yoast SEO – Advanced SEO with real-time guidance and built-in AI

    Fixed in 1.4.5 · WPVulnerability
  12. Unrated

    WPV-cda821d92357 · Loco Translate (WordPress plugin)

    Vulnerability in Loco Translate

    Fixed in 2.2.2 · WPVulnerability
  13. Unrated

    WPV-cd739fbff582 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  14. Unrated

    WPV-c9ae90c085c5 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.7.4 · WPVulnerability
  15. Unrated

    WPV-c73529fa08d5 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  16. Unrated

    WPV-c37782c68c6e · Flexible Shipping (WordPress plugin)

    Vulnerability in Weight Based Shipping Table Rate for WooCommerce – Flexible Shipping

    Fixed in 4.11.9 · WPVulnerability
  17. Unrated

    WPV-be36adef83e7 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.7.4 · WPVulnerability
  18. Unrated

    WPV-bade22a27d9c · Yoast SEO

    Vulnerability in Yoast SEO – Advanced SEO with real-time guidance and built-in AI

    Fixed in 3.2.5 · WPVulnerability
  19. Unrated

    WPV-b6586bc6086c · WP Super Cache (WordPress plugin)

    Vulnerability in WP Super Cache

    Fixed in 1.4.9 · WPVulnerability
  20. Unrated

    WPV-b3c421e51ef4 · SEO By Rank Math (WordPress plugin)

    Vulnerability in Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

    Fixed in 1.0.27 · WPVulnerability
  21. Unrated

    WPV-aefc9a30998b · Tinymce Advanced (WordPress plugin)

    Vulnerability in Advanced Editor Tools

    Fixed in 4.2.3 · WPVulnerability
  22. Unrated

    WPV-ab53cd5cc90f · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  23. Unrated

    WPV-a9c0d71872b8 · Yith Woocommerce Wishlist (WordPress plugin)

    Vulnerability in YITH WooCommerce Wishlist

    Fixed in 3.15.0 · WPVulnerability
  24. Unrated

    WPV-9474b985c51a · WP Super Cache (WordPress plugin)

    Vulnerability in WP Super Cache

    Fixed in 1.4.3 · WPVulnerability
  25. Unrated

    WPV-7f89a659cd44 · WPForms Lite

    Vulnerability in WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    Fixed in 1.6.0.2 · WPVulnerability
  26. Unrated

    WPV-7da01952c212 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.7.4 · WPVulnerability
  27. Unrated

    WPV-7c959d2053be · Intuitive Custom Post Order (WordPress plugin)

    Vulnerability in Intuitive Custom Post Order

    WPVulnerability
  28. Unrated

    WPV-73af2c0fd407 · Gtranslate (WordPress plugin)

    Vulnerability in Translate WordPress with GTranslate

    Fixed in 1.0.13 · WPVulnerability
  29. Unrated

    WPV-672d8e5c4087 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  30. Unrated

    WPV-5f6f1818436b · Gtranslate (WordPress plugin)

    Vulnerability in Translate WordPress with GTranslate

    Fixed in 2.8.11 · WPVulnerability
  31. Unrated

    WPV-577a52860f90 · Advanced Custom Fields Pro (WordPress plugin)

    Vulnerability in Advanced Custom Field Pro

    Fixed in 6.2.5 · WPVulnerability
  32. Unrated

    WPV-577853d93887 · Google Site Kit (WordPress plugin)

    Vulnerability in Site Kit by Google – Analytics, Search Console, AdSense, Speed

    Fixed in 1.8.0 · WPVulnerability
  33. Unrated

    WPV-560e1bf85ce9 · Yoast SEO

    Vulnerability in Yoast SEO – Advanced SEO with real-time guidance and built-in AI

    Fixed in 1.4.7 · WPVulnerability
  34. Unrated

    WPV-509db8729ca2 · Woo Discount Rules (WordPress plugin)

    Vulnerability in Discount Rules for WooCommerce

    Fixed in 2.2.1 · WPVulnerability
  35. Unrated

    WPV-4e1d476f91a8 · SEO By Rank Math (WordPress plugin)

    Vulnerability in Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

    Fixed in 1.0.42.2 · WPVulnerability
  36. Unrated

    WPV-496a80c3fbe6 · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  37. Unrated

    WPV-3b859375772f · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  38. Unrated

    WPV-37e21893252a · WPForms Lite

    Vulnerability in WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    Fixed in 1.7.5.5 · WPVulnerability
  39. Unrated

    WPV-353a377dfb48 · WPForms Lite

    Vulnerability in WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

    Fixed in 1.4.8.1 · WPVulnerability
  40. Unrated

    WPV-303dbee21964 · Yith Woocommerce Catalog Mode (WordPress plugin)

    Vulnerability in YITH WooCommerce Catalog Mode

    Fixed in 2.16.1 · WPVulnerability
  41. Unrated

    WPV-2ccdc7979730 · Redirection (WordPress plugin)

    Vulnerability in Redirection

    Fixed in 2.3.4 · WPVulnerability
  42. Unrated

    WPV-1e4a734315a4 · Redirection (WordPress plugin)

    Vulnerability in Redirection

    Fixed in 3.6.3 · WPVulnerability
  43. Unrated

    WPV-1c266cf6e413 · Woo Discount Rules (WordPress plugin)

    Vulnerability in Discount Rules for WooCommerce

    Fixed in 2.1.0 · WPVulnerability
  44. Unrated

    WPV-0e896cba6b5d · Redirection (WordPress plugin)

    Vulnerability in Redirection

    Fixed in 2.8 · WPVulnerability
  45. Unrated

    WPV-0d687c278bed · W3 Total Cache (WordPress plugin)

    Vulnerability in W3 Total Cache

    Fixed in 0.9.5 · WPVulnerability
  46. Unrated

    WPV-08c341d4c1a5 · Yoast SEO

    Vulnerability in Yoast SEO – Advanced SEO with real-time guidance and built-in AI

    Fixed in 3.3.0 · WPVulnerability

Where it comes from

The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.

  • NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
  • New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
  • OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
  • WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
  • Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
  • The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
  • CISA's Known Exploited Vulnerabilities catalog.

Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.

Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.