Fluid Attacks Database

Ecosystem DebianComponent wordpress

FLAT-FENC3 (CVE-2026-65640)

Insecure file upload In wordpress

5.2

Medium

Ecosystem: Debian

Component: wordpress

FLAT-72JXS (CVE-2026-64638)

Reflected cross-site scripting (XSS) In wordpress

5.9

Medium

Ecosystem: Debian

Component: wordpress

FLAT-LTIHL (CVE-2026-63030)

SQL injection In wordpress

5.2

Medium

Ecosystem: Debian

Component: wordpress

FLAT-PEH24 (CVE-2026-60137)

Lack of data validation In wordpress

6.9

Medium

Ecosystem: Debian

Component: wordpress

FLAT-FMP3M (CVE-2026-3906)

Improper authorization control for web services In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-UMLFG (DSA-6091-1)

Insecure file upload In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-JGVHA (DSA-6075-1)

Insecure file upload In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-I0V1N (DLA-4358-1)

Insecure file upload In wordpress

0.6

Low

Ecosystem: Debian

Component: wordpress

FLAT-RUWCD (CVE-2025-58674)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-QLB5W (CVE-2025-58246)

Business information leak In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-VESAU (CVE-2025-54352)

Business information leak In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-ML9K3 (CVE-2022-4973)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-OYHWA (CVE-2024-31111)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-A2VCD (CVE-2024-6307)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-R4YBX (DSA-5685-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-R5PZR (CVE-2024-4439)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-T775F (CVE-2023-5692)

Business information leak In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-XO0CW (CVE-2024-31210)

Lack of data validation In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-DIZJ8 (CVE-2024-31211)

Insecure deserialization In wordpress

1.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-T5JKP (DLA-3756-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-KA4RN (DLA-3658-1)

Server side cross-site scripting In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-JR511 (CVE-2023-5561)

Improper authorization control for web services In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-R373K (CVE-2023-39999)

Business information leak In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-XFMSK (CVE-2023-38000)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-X88OZ (DLA-3462-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-Q6O1N (CVE-2023-2745)

Lack of data validation - Path Traversal In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-542D1 (CVE-2022-3590)

Server-side request forgery (SSRF) In wordpress

6.9

Medium

Ecosystem: Debian

Component: wordpress

FLAT-LSN0Q (CVE-2022-43497)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-6LQ3Q (CVE-2022-43500)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-ESCNI (CVE-2022-43504)

Improper authorization control for web services In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-ZQSWW (DSA-5279-2)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-QJQDL (DSA-5279-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-IH63U (DLA-3163-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-DVAXS (DLA-3141-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-OXGCE (CVE-2011-1762)

Excessive privileges In wordpress

4.9

Medium

Ecosystem: Debian

Component: wordpress

FLAT-3PQB9 (DLA-2956-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-D3TJY (DLA-2884-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-Y36IX (DSA-5039-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-Q1W9K (CVE-2022-21663)

Lack of data validation In wordpress

6.1

Medium

Ecosystem: Debian

Component: wordpress

FLAT-H4T03 (CVE-2022-21662)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-8S99U (CVE-2022-21664)

SQL injection In wordpress

6.3

Medium

Ecosystem: Debian

Component: wordpress

FLAT-FJVCN (CVE-2022-21661)

SQL injection In wordpress

6.6

Medium

Ecosystem: Debian

Component: wordpress

FLAT-U5GEV (CVE-2021-44223)

Insecure service configuration In wordpress

8.1

High

Ecosystem: Debian

Component: wordpress

FLAT-HZNBV (DSA-4985-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-KI7UM (CVE-2021-39201)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-DX9ZF (DLA-2731-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-5I9R4 (DSA-4896-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-DMUKP (DLA-2630-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-WOPTK (DSA-4784-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-LI8IP (DLA-2429-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-OTZET (CVE-2020-25286)

Enabled default configuration In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-8WCFU (DLA-2371-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-PF0PN (DLA-2269-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-7R39A (DSA-4709-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-0RP9S (CVE-2020-4048)

Uncontrolled external site redirect In wordpress

4.3

Medium

Ecosystem: Debian

Component: wordpress

FLAT-NDEF8 (CVE-2020-4050)

Lack of data validation In wordpress

0.6

Low

Ecosystem: Debian

Component: wordpress

FLAT-WH84J (CVE-2020-4047)

Server side cross-site scripting In wordpress

4.6

Medium

Ecosystem: Debian

Component: wordpress

FLAT-AS20A (CVE-2020-4049)

Server side cross-site scripting In wordpress

1.1

Low

Ecosystem: Debian

Component: wordpress

FLAT-SQEW9 (CVE-2020-4046)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-OYPOD (DLA-2208-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-LJ9I1 (DSA-4677-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-8M6Y4 (CVE-2020-11026)

Insecure file upload In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-X6CG8 (CVE-2020-11029)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-207CW (CVE-2020-11027)

Account lockout In wordpress

4.9

Medium

Ecosystem: Debian

Component: wordpress

FLAT-7U1HV (CVE-2020-11028)

Business information leak In wordpress

6.6

Medium

Ecosystem: Debian

Component: wordpress

FLAT-EK68W (CVE-2020-11030)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-T2R2U (CVE-2020-11025)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-DVQQQ (DLA-2067-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-78IPJ (DSA-4599-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-PYH0Y (CVE-2019-20041)

Server side cross-site scripting In wordpress

8.1

High

Ecosystem: Debian

Component: wordpress

FLAT-LPPXA (CVE-2019-20042)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-OB9K4 (CVE-2019-20043)

Improper authorization control for web services In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-2YGGQ (CVE-2019-16781)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-MOORE (CVE-2019-16780)

Server side cross-site scripting In wordpress

0.5

Low

Ecosystem: Debian

Component: wordpress

FLAT-4S5S7 (DLA-1980-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-VKA14 (CVE-2019-17674)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-IA382 (CVE-2019-17673)

Lack of data validation In wordpress

6.6

Medium

Ecosystem: Debian

Component: wordpress

FLAT-I1BOF (CVE-2019-17672)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-SQQVP (CVE-2019-17675)

Cross-site request forgery In wordpress

6.3

Medium

Ecosystem: Debian

Component: wordpress

FLAT-AIQJF (CVE-2019-17669)

Server-side request forgery (SSRF) In wordpress

8.1

High

Ecosystem: Debian

Component: wordpress

FLAT-476Z4 (CVE-2019-17671)

Enabled default configuration In wordpress

2.7

Low

Ecosystem: Debian

Component: wordpress

FLAT-B6V2W (CVE-2019-17670)

Server-side request forgery (SSRF) In wordpress

8.1

High

Ecosystem: Debian

Component: wordpress

FLAT-MK2RL (DLA-1960-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-UPHIB (CVE-2019-16222)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-9GDBF (CVE-2019-16223)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-ANYV1 (CVE-2019-16221)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-2E7K6 (CVE-2019-16219)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-UQFBD (CVE-2019-16220)

Uncontrolled external site redirect In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-B96K3 (CVE-2019-16217)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-EQJFN (CVE-2019-16218)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-C6NN6 (CVE-2017-6514)

Lack of data validation - Path Traversal In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-GX6PG (DLA-1742-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-XDTG4 (CVE-2019-9787)

Server side cross-site scripting In wordpress

6.3

Medium

Ecosystem: Debian

Component: wordpress

FLAT-FFNP1 (DSA-4401-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-XPH42 (DLA-1673-1)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-DZZJJ (CVE-2018-20152)

Lack of data validation In wordpress

4.9

Medium

Ecosystem: Debian

Component: wordpress

FLAT-VHF3P (CVE-2018-20150)

Server side cross-site scripting In wordpress

1.3

Low

Ecosystem: Debian

Component: wordpress

FLAT-9Q2KV (CVE-2018-20147)

Lack of data validation In wordpress

4.9

Medium

Ecosystem: Debian

Component: wordpress

FLAT-B8FAR (CVE-2018-20153)

Server side cross-site scripting In wordpress

1.2

Low

Ecosystem: Debian

Component: wordpress

FLAT-TR4WZ (CVE-2018-20149)

Insecure file upload In wordpress

1.1

Low

Ecosystem: Debian

Component: wordpress