Vendor Report: Wordpress

Vendor

Vendor CVE Table

11 23 17 46 20 11 29 20 32 12 2 16 54 48 16 10 2

Vendor CVE Counts by Year Graph

Vendor OWASP CVE Counts by Year Table

Expand/Collapse

Title	2020	2019	2018	2017	2016	2015	2014	2013	2012	2011	2010	2009	2008	2007	2006	2005	2004
Sql Injection	0	0	0	4	0	1	1	0	2	2	1	0	14	7	1	3	0
Broken Authentication	0	0	0	3	1	1	2	2	2	0	0	1	1	1	0	0	0
Sensitive Data Exposure	0	0	0	0	0	0	0	0	0	1	0	0	0	0	0	0	0
Cross Site Scripting (XSS)	3	12	5	12	9	7	8	8	14	2	0	4	18	26	5	2	1
Insecure Encryption	0	0	0	0	0	0	0	0	0	0	0	0	2	0	0	0	0
Information Leakage	0	0	0	0	0	0	0	0	0	0	0	0	0	0	1	1	0
Unvalidated Redirect	1	1	1	3	2	0	0	1	1	1	0	1	0	2	0	0	1
Cross Site Request Forgery	0	2	0	5	1	1	3	2	3	0	0	0	4	2	0	0	0
Insufficient Logging and Monitoring	0	0	1	0	0	0	1	0	1	1	0	1	2	1	1	0	0
Brute Force	0	0	0	0	0	0	0	0	0	0	0	0	0	1	0	0	0
Path Traversal	0	1	0	0	0	0	0	0	0	0	0	0	0	0	0	0	0
HTTP Response Splitting	0	0	0	0	0	0	0	0	0	0	0	0	0	0	0	0	1
Sniffing	0	0	0	0	0	0	0	0	1	0	0	0	1	0	0	0	0
Spoofing	0	0	0	1	0	0	0	2	0	0	0	0	0	0	1	0	0

Vendor OWASP CVE Counts by Year Graph

Vendor Data Table

Product

Version Count

CVE Count

CvssV2 Base Score - Average

CvssV2 Exploitability Score - Average

BaseV2 Impact Score - Average

CvssV3 Base Score - Average

CvssV3 Exploitability Score - Average

BaseV3 Impact Score - Average

CVEs

Adserve

7.50

10.00

6.40

N/A


CVE-2008-0507

Alert Before You Post

4.30

8.60

2.90

N/A


CVE-2011-5107

Blix

4.30

8.60

2.90

N/A


CVE-2007-4014, CVE-2007-4481

Blixed

4.30

8.60

2.90

N/A


CVE-2007-4014

Blixkrieg

4.30

8.60

2.90

N/A


CVE-2007-4014

Captcha

4.30

8.60

2.90

N/A


CVE-2008-0206

Cryptographp

4.30

8.60

2.90

N/A


CVE-2008-0203

Dean Logan Wp-people Plugin

7.50

10.00

6.40

N/A


CVE-2008-0845

Download Monitor Plugin

7.50

10.00

6.40

N/A


CVE-2008-2034

Fcchat Widget

6.80

8.60

6.40

N/A


CVE-2012-3578

Fgallery Plugin

7.50

10.00

6.40

N/A


CVE-2008-0491

Filemanager

7.50

10.00

6.40

N/A


CVE-2008-0222

Lanoba Social Plugin

4.30

8.60

2.90

N/A


CVE-2011-5182

Math Comment Spam Protection Plugin

4.30

8.60

2.90

N/A


CVE-2008-0204, CVE-2008-0205

Page Flip Image Gallery Plugin

4.30

8.60

2.90

N/A


CVE-2008-5752

Pay-with-tweet

4.30

5.85

4.65

N/A


CVE-2012-5349, CVE-2012-5350

Permalinks Migration Plugin

6.80

8.60

6.40

N/A


CVE-2008-0508

Peter's Math Anti-spam For Wordpress

4.30

8.60

2.90

N/A


CVE-2008-7216

Photo Album Plugin

7.50

10.00

6.40

N/A


CVE-2008-0939

Pictpress

5.00

10.00

2.90

N/A


CVE-2007-6369

Plugin Newsletter Plugin

5.00

10.00

2.90

N/A


CVE-2012-3588

Pool

4.30

8.60

2.90

N/A


CVE-2007-4482

Search Unleashed Plugin

4.30

8.60

2.90

N/A


CVE-2008-0837

Sirius

4.30

8.60

2.90

N/A


CVE-2007-4480

Slideshow Gallery2

4.30

8.60

2.90

N/A


CVE-2012-5229

Sniplets Plugin

6.43

9.53

5.23

N/A


CVE-2008-1059, CVE-2008-1060, CVE-2008-1061

Spambam Plugin

5.00

10.00

2.90

N/A


CVE-2008-4616

St Newsletter Plugin

7.50

10.00

6.40

N/A


CVE-2008-0683

Unamed Theme

5.00

10.00

2.90

N/A


CVE-2007-4166

Unamed Theme Se

5.00

10.00

2.90

N/A


CVE-2007-4166

Upload File Plugin

7.50

10.00

6.40

N/A


CVE-2008-2510

Wassup Plugin

5.90

9.30

4.65

N/A


CVE-2008-0520, CVE-2012-2633

Wordpress

321

5.24

8.62

4.17

6.80

2.98

3.53


CVE-2003-1598, CVE-2003-1599, CVE-2004-1559, CVE-2004-1584, CVE-2005-1102,
CVE-2005-1687, CVE-2005-1688, CVE-2005-1810, CVE-2005-2107, CVE-2005-2108,
CVE-2005-2109, CVE-2005-2110, CVE-2005-2612, CVE-2005-4463, CVE-2006-0733,
CVE-2006-0985, CVE-2006-0986, CVE-2006-1012, CVE-2006-1263, CVE-2006-1796,
CVE-2006-2667, CVE-2006-2702, CVE-2006-3389, CVE-2006-3390, CVE-2006-4028,
CVE-2006-4743, CVE-2006-5705, CVE-2006-6016, CVE-2006-6017, CVE-2006-6808,
CVE-2007-0106, CVE-2007-0107, CVE-2007-0109, CVE-2007-0233, CVE-2007-0262,
CVE-2007-0539, CVE-2007-0540, CVE-2007-0541, CVE-2007-1049, CVE-2007-1230,
CVE-2007-1244, CVE-2007-1277, CVE-2007-1409, CVE-2007-1599, CVE-2007-1622,
CVE-2007-1732, CVE-2007-1893, CVE-2007-1894, CVE-2007-1897, CVE-2007-2627,
CVE-2007-2821, CVE-2007-3140, CVE-2007-3238, CVE-2007-3239, CVE-2007-3240,
CVE-2007-3241, CVE-2007-3543, CVE-2007-3544, CVE-2007-3639, CVE-2007-4139,
CVE-2007-4153, CVE-2007-4154, CVE-2007-4165, CVE-2007-4893, CVE-2007-4894,
CVE-2007-5105, CVE-2007-5106, CVE-2007-5710, CVE-2007-6013, CVE-2007-6318,
CVE-2007-6677, CVE-2008-0191, CVE-2008-0192, CVE-2008-0193, CVE-2008-0194,
CVE-2008-0195, CVE-2008-0196, CVE-2008-0198, CVE-2008-0491, CVE-2008-0615,
CVE-2008-0616, CVE-2008-0617, CVE-2008-0618, CVE-2008-0664, CVE-2008-1304,
CVE-2008-1930, CVE-2008-2068, CVE-2008-2146, CVE-2008-2392, CVE-2008-3233,
CVE-2008-3747, CVE-2008-4106, CVE-2008-4769, CVE-2008-5113, CVE-2008-5278,
CVE-2008-5695, CVE-2008-6762, CVE-2008-6767, CVE-2009-2334, CVE-2009-2335,
CVE-2009-2336, CVE-2009-2431, CVE-2009-2432, CVE-2009-2762, CVE-2009-2851,
CVE-2009-2853, CVE-2009-2854, CVE-2009-3622, CVE-2009-3890, CVE-2009-3891,
CVE-2010-0682, CVE-2010-4257, CVE-2010-4536, CVE-2010-5106, CVE-2010-5293,
CVE-2010-5294, CVE-2010-5295, CVE-2010-5296, CVE-2010-5297, CVE-2011-0700,
CVE-2011-0701, CVE-2011-3122, CVE-2011-3125, CVE-2011-3126, CVE-2011-3127,
CVE-2011-3128, CVE-2011-3129, CVE-2011-3130, CVE-2011-3818, CVE-2011-4898,
CVE-2011-4899, CVE-2011-4956, CVE-2011-4957, CVE-2011-5216, CVE-2011-5270,
CVE-2012-0287, CVE-2012-0782, CVE-2012-0937, CVE-2012-1936, CVE-2012-2399,
CVE-2012-2400, CVE-2012-2401, CVE-2012-2402, CVE-2012-2403, CVE-2012-2404,
CVE-2012-3383, CVE-2012-3384, CVE-2012-3385, CVE-2012-3414, CVE-2012-4271,
CVE-2012-4421, CVE-2012-4422, CVE-2012-4448, CVE-2012-5868, CVE-2012-6527,
CVE-2012-6633, CVE-2012-6634, CVE-2012-6635, CVE-2012-6707, CVE-2013-0235,
CVE-2013-0236, CVE-2013-0237, CVE-2013-2173, CVE-2013-2199, CVE-2013-2200,
CVE-2013-2201, CVE-2013-2202, CVE-2013-2203, CVE-2013-2204, CVE-2013-2205,
CVE-2013-4338, CVE-2013-4339, CVE-2013-4340, CVE-2013-5738, CVE-2013-5739,
CVE-2013-7233, CVE-2013-7240, CVE-2014-0165, CVE-2014-0166, CVE-2014-5203,
CVE-2014-5204, CVE-2014-5205, CVE-2014-5240, CVE-2014-5265, CVE-2014-5266,
CVE-2014-6412, CVE-2014-9031, CVE-2014-9032, CVE-2014-9033, CVE-2014-9034,
CVE-2014-9035, CVE-2014-9036, CVE-2014-9037, CVE-2014-9038, CVE-2014-9039,
CVE-2015-2213, CVE-2015-3438, CVE-2015-3439, CVE-2015-3440, CVE-2015-5622,
CVE-2015-5623, CVE-2015-5714, CVE-2015-5715, CVE-2015-5730, CVE-2015-5731,
CVE-2015-5732, CVE-2015-5733, CVE-2015-5734, CVE-2015-7989, CVE-2015-8834,
CVE-2016-10148, CVE-2016-1564, CVE-2016-2221, CVE-2016-2222, CVE-2016-4029,
CVE-2016-4566, CVE-2016-4567, CVE-2016-5832, CVE-2016-5833, CVE-2016-5834,
CVE-2016-5835, CVE-2016-5836, CVE-2016-5837, CVE-2016-5838, CVE-2016-5839,
CVE-2016-6634, CVE-2016-6635, CVE-2016-6896, CVE-2016-6897, CVE-2016-7168,
CVE-2016-7169, CVE-2016-9263, CVE-2017-1000600, CVE-2017-1001000, CVE-2017-14718,
CVE-2017-14719, CVE-2017-14720, CVE-2017-14721, CVE-2017-14722, CVE-2017-14723,
CVE-2017-14724, CVE-2017-14725, CVE-2017-14726, CVE-2017-14990, CVE-2017-16510,
CVE-2017-17091, CVE-2017-17092, CVE-2017-17093, CVE-2017-17094, CVE-2017-5487,
CVE-2017-5488, CVE-2017-5489, CVE-2017-5490, CVE-2017-5491, CVE-2017-5492,
CVE-2017-5493, CVE-2017-5610, CVE-2017-5611, CVE-2017-5612, CVE-2017-6514,
CVE-2017-6814, CVE-2017-6815, CVE-2017-6816, CVE-2017-6817, CVE-2017-6818,
CVE-2017-6819, CVE-2017-8295, CVE-2017-9061, CVE-2017-9062, CVE-2017-9063,
CVE-2017-9064, CVE-2017-9065, CVE-2017-9066, CVE-2018-1000773, CVE-2018-10100,
CVE-2018-10101, CVE-2018-10102, CVE-2018-12895, CVE-2018-14028, CVE-2018-20147,
CVE-2018-20148, CVE-2018-20149, CVE-2018-20150, CVE-2018-20151, CVE-2018-20152,
CVE-2018-20153, CVE-2018-5776, CVE-2018-6389, CVE-2019-16217, CVE-2019-16218,
CVE-2019-16219, CVE-2019-16220, CVE-2019-16221, CVE-2019-16222, CVE-2019-16223,
CVE-2019-16780, CVE-2019-16781, CVE-2019-17669, CVE-2019-17670, CVE-2019-17671,
CVE-2019-17672, CVE-2019-17673, CVE-2019-17674, CVE-2019-17675, CVE-2019-20041,
CVE-2019-20042, CVE-2019-20043, CVE-2019-8942, CVE-2019-8943, CVE-2019-9787,
CVE-2020-11025, CVE-2020-11026, CVE-2020-11027, CVE-2020-11028, CVE-2020-11029,
CVE-2020-11030, CVE-2020-4046, CVE-2020-4047, CVE-2020-4048, CVE-2020-4049,
CVE-2020-4050

Wordpress Mu

5.38

8.42

4.51

N/A


CVE-2007-3543, CVE-2007-3544, CVE-2007-4544, CVE-2008-4671, CVE-2008-5695,
CVE-2009-1030, CVE-2009-2334, CVE-2009-2335, CVE-2009-2336, CVE-2009-2432

Wordpress-users

7.50

10.00

6.40

N/A


CVE-2011-4669

Wordpressclassic

4.30

8.60

2.90

N/A


CVE-2007-4483

Wordspew

7.50

10.00

6.40

N/A


CVE-2008-0682

Wp Cal Plugin

7.50

10.00

6.40

N/A


CVE-2008-0490

Wp Download

7.50

10.00

6.40

N/A


CVE-2008-1646

Wp Downloads Manager

10.00

N/A


CVE-2008-3362

Wp Forum

6.80

8.60

6.40

N/A


CVE-2008-0388

Wp Maintenance Mode Plugin

6.80

8.60

6.40

N/A


CVE-2013-3250

Wp-contactform

4.30

8.60

2.90

N/A


CVE-2008-0197

Wp-footnotes

4.30

8.60

2.90

N/A


CVE-2008-0691

Wpss

7.50

10.00

6.40

N/A


CVE-2008-1982