WordPress 4.7.26 Vulnerabilities

Version released on 2023-05-16

Download tar
Download zip
Published
Title
Fixed in
CVSS
Published
2024-01-30
Title
WordPress < 6.4.3 - Deserialization of Untrusted Data
Fixed in
Fixed in 4.7.28
CVSS
8.5 (high)
Published
2024-01-30
Title
WordPress < 6.4.3 - Admin+ PHP File Upload
Fixed in
Fixed in 4.7.28
CVSS
6.6 (medium)
Published
2023-10-12
Title
WP < 6.3.2 - Denial of Service via Cache Poisoning
Fixed in
Fixed in 4.7.27
CVSS
5.3 (medium)
Published
2023-10-12
Title
WP < 6.3.2 - Subscriber+ Arbitrary Shortcode Execution
Fixed in
Fixed in 4.7.27
CVSS
4.3 (medium)
Published
2023-10-12
Title
WP < 6.3.2 - Contributor+ Comment Disclosure
Fixed in
Fixed in 4.7.27
CVSS
2.7 (low)
Published
2023-10-12
Title
WP < 6.3.2 - Unauthenticated Post Author Email Disclosure
Fixed in
Fixed in 4.7.27
CVSS
5.3 (medium)