WordPress

Contributor+ Path Traversal (Windows Only) vulnerability < 6.5.5

5.0

25 June, 2024

Cross Site Scripting (XSS) via templatepart vulnerability < 6.5.5

6.5

25 June, 2024

Contributor+ Stored CrossSite Scripting via HTML API < 6.5.5

6.5

25 June, 2024

Authenticated (Contributor+) Stored CrossSite Scripting Via Avatar Block vulnerability <= 6.5.0

6.5

9 April, 2024

Sensitive Information Exposure via redirect_guess_404_permalink vulnerability <= 6.4.3

5.3

5 April, 2024