Open Source WordPress

Name: Open Source WordPress
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical0high1medium0low

updated 2026-10-26

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-87902US	—OT critical	95.8% (100th)	KEV	4.7.37	2026-09-22	25 versions
CVE-2026-63030US	—OT critical	10.6% (96th)	KEV	7.0.2	2026-07-17	2 versions
CVE-2026-60137US	—OT critical	5.32% (93rd)	KEV	6.9.5	2026-07-17	2 versions
CVE-2023-2745US	—	79.4% (100th)	Exploit	6.2.1	2023-05-17	< 6.2.1
CVE-2024-4439US	medium6.1	71.0% (99th)	Exploit	6.1.6	2024-05-03	5 versions
CVE-2026-65640US	—	1.94% (80th)	Exploit	7.0.4	2026-08-17	< 7.0.4
CVE-2026-64638US	—	0.89% (59th)	Exploit	7.0.3	2026-08-07	< 7.0.3
CVE-2026-93485US	—	0.35% (29th)	Exploit	6.4.11	2026-09-18	25 versions
CVE-2023-5692US	—	0.84% (58th)	—	no fix	2024-04-05	≤ 6.4.3
CVE-2024-6307US	—	0.47% (40th)	—	6.5.5	2024-06-25	< 6.5.5
CVE-2026-66666US	—	0.40% (34th)	—	7.1.3	2026-10-06	< 7.1.3
CVE-2026-3906US	—OT elevated	0.31% (24th)	—	6.9.2	2026-03-11	< 6.9.2
CVE-2025-58246US	—	0.27% (19th)	—	no fix	2025-09-23	≤ 6.8.2
CVE-2025-58674US	—	0.22% (12th)	—	no fix	2025-09-23	≤ 6.8.2
CVE-2024-6306US	—	—	—	6.5.5	2024-06-25	< 6.5.5
CVE-2024-6305US	—	—	—	6.5.5	2024-06-25	< 6.5.5

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data2 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-436Interpretation Conflict1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.