Hoch

WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal

Veröffentlicht: 22.09.2026
Aktualisiert: 11.10.2026 10:22

CISA bestätigt die Ausnutzung dieser Schwachstelle in realen Angriffen. Prüfen Sie vorrangig, ob Ihre Anwendung betroffen ist. CISA KEV · CC0 1.0

WordPress Core is vulnerable to Local File Inclusion via the locate_template() function in various versions up to, and including, 7.1.1. The function resolved a caller-supplied template name against the theme directories without verifying the result stayed within them, so a template name containing '..' could resolve to a readable PHP file outside the active theme and be included. The core-reachable vector is get_page_template(), which builds page-{$pagename}.php from the URL-derived, url-decoded 'pagename' query variable. This makes it possible for unauthenticated attackers to make page-template resolution include a chosen readable local .php file outside the theme directories, which under certain conditions can lead to remote code execution. Exploitation requires (1) the active parent or child theme to contain a top-level directory whose name begins with 'page-' (e.g. 'page-templates' in Twenty Twelve, Twenty Fourteen, Neve, Hestia, Sydney), and (2) a readable .php target on the server accessible to the web-server account (e.g. pearcmd.php with register_argc_argv=On, as in the official PHP Docker image and default cPanel setups on PHP < 8.5), which yields RCE.

Betroffene Software

Klicken Sie auf eine Technologie, um alle zugehörigen Schwachstellen anzuzeigen.

Plattform	Paket	Anfällige Versionen	Behoben in
WordPress (Kern)	WordPress	>= 4.7, <= 4.7.36, >= 4.8, <= 4.8.31, >= 4.9, <= 4.9.32, >= 5.0, <= 5.0.28, >= 5.1, <= 5.1.25, >= 5.2, <= 5.2.27, >= 5.3, <= 5.3.24, >= 5.4, <= 5.4.22, >= 5.5, <= 5.5.21, >= 5.6, <= 5.6.20, >= 5.7, <= 5.7.18, >= 5.8, <= 5.8.16, >= 5.9, <= 5.9.17, >= 6.0, <= 6.0.15, >= 6.1, <= 6.1.13, >= 6.2, <= 6.2.12, >= 6.3, <= 6.3.11, >= 6.4, <= 6.4.11, >= 6.5, <= 6.5.11, >= 6.6, <= 6.6.8, >= 6.7, <= 6.7.8, >= 6.8, <= 6.8.9, >= 6.9, <= 6.9.8, >= 7.0, <= 7.0.5, >= 7.1, <= 7.1.1	4.7.37, 4.8.32, 4.9.33, 5.0.29, 5.1.26, 5.2.28, 5.3.25, 5.4.23, 5.5.22, 5.6.21, 5.7.19, 5.8.17, 5.9.18, 6.0.16, 6.1.14, 6.2.13, 6.3.12, 6.4.12, 6.5.12, 6.6.9, 6.7.9, 6.8.10, 6.9.9, 7.0.6, 7.1.2

Verweise

https://www.wordfence.com/threat-intel/vulnerabilities/id/6ff76d9b-aa12-4391-90cd-f9df36d4a3a5?source=api-prod

CVSS-Wert 8.1/10

CVSS-Vektor: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Schwäche (CWE): CWE-98
Plattform: WordPress
Paket: WordPress
Veröffentlicht: 22.09.2026
Aktualisiert: 11.10.2026 10:22

Quellen und Lizenzen

Wordfence Intelligence - 6ff76d9b-aa12-4391-90cd-f9df36d4a3a5 - Wordfence Intelligence

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

https://www.cve.org/Legal/TermsOfUse

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/

Wordfence Intelligence

Wordfence Intelligence - Defiant, Inc.
Copyright Defiant, Inc. All rights reserved except as granted below.
License grant, section 3.1 of the Wordfence Intelligence Terms and Conditions (January 26, 2026):

Subject to this Agreement, Company hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Service. Any copy you make for such purposes is authorized provided that you reproduce Company’s copyright designation, this license, and the license of any disclosed Company licensor in any such copy.

Full applicable Agreement: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/

Schwachstellenhistorie: WordPress

Alle veröffentlichten Schwachstellen dieses Pakets (WordPress (Kern)), neueste zuerst. Zeigt, ob es ein einmaliger Ausrutscher ist oder ein Paket, das man im Auge behalten muss.

Alle (385) im Archiv

Einträge insgesamt: 385
Erste → letzte: 06.2003 10.2026
Ohne Fix: 0
In Angriffen ausgenutzt: 3

Verteilung nach Schweregrad

Kritisch 16
Hoch 95
Mittel 263
Niedrig 11

Veröffentlichungen pro Jahr

2017: 39
2018: 15
2019: 22
2020: 23
2021: 5
2022: 20
2023: 14
2024: 4
2025: 2
2026: 36

früher: 205

06.10.2026

WordPress Core 7.1 - 7.1.2 - Unauthenticated Stored Cross-Site Scripting via Pending Comments

Hoch · 7.2 4a3e3e6e-9c17-4ac5-9f83-1e01365436e9 >= 7.1.0, <= 7.1.2 7.1.3
22.09.2026

WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal dieser Eintrag

Hoch · 8.1 In Angriffen ausgenutzt CVE-2026-87902 >= 4.7, <= 4.7.36, >= 4.8, <= 4.8.31, >= 4.9, <= 4.9.32, >= 5.0, <= 5.0.28, >= 5.1, <= 5.1.25, >= 5.2, <= 5.2.27, >= 5.3, <= 5.3.24, >= 5.4, <= 5.4.22, >= 5.5, <= 5.5.21, >= 5.6, <= 5.6.20, >= 5.7, <= 5.7.18, >= 5.8, <= 5.8.16, >= 5.9, <= 5.9.17, >= 6.0, <= 6.0.15, >= 6.1, <= 6.1.13, >= 6.2, <= 6.2.12, >= 6.3, <= 6.3.11, >= 6.4, <= 6.4.11, >= 6.5, <= 6.5.11, >= 6.6, <= 6.6.8, >= 6.7, <= 6.7.8, >= 6.8, <= 6.8.9, >= 6.9, <= 6.9.8, >= 7.0, <= 7.0.5, >= 7.1, <= 7.1.1 4.7.37, 4.8.32, 4.9.33, 5.0.29, 5.1.26, 5.2.28, 5.3.25, 5.4.23, 5.5.22, 5.6.21, 5.7.19, 5.8.17, 5.9.18, 6.0.16, 6.1.14, 6.2.13, 6.3.12, 6.4.12, 6.5.12, 6.6.9, 6.7.9, 6.8.10, 6.9.9, 7.0.6, 7.1.2
17.09.2026

WordPress Core <= 7.1 - Unauthenticated Stored Cross-Site Scripting via wpautop() Blockquote Handling

Hoch · 7.2 CVE-2026-93485 <= 6.6.7, >= 6.7, <= 6.7.7, >= 6.8, <= 6.8.8, >= 6.9, <= 6.9.7, >= 7.0, <= 7.0.4, = 7.1 6.6.8, 6.7.8, 6.8.9, 6.9.8, 7.0.5, 7.1.1
12.08.2026

WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload

Hoch · 8.8 CVE-2026-65640 >= 4.7.0, <= 4.7.34, >= 4.8.0, <= 4.8.29, >= 4.9.0, <= 4.9.30, >= 5.0.0, <= 5.0.26, >= 5.1.0, <= 5.1.23, >= 5.2.0, <= 5.2.25, >= 5.3.0, <= 5.3.22, >= 5.4.0, <= 5.4.20, >= 5.5.0, <= 5.5.19, >= 5.6.0, <= 5.6.18, >= 5.7.0, <= 5.7.16, >= 5.8.0, <= 5.8.14, >= 5.9.0, <= 5.9.15, >= 6.0.0, <= 6.0.13, >= 6.1.0, <= 6.1.11, >= 6.2.0, <= 6.2.10, >= 6.3.0, <= 6.3.9, >= 6.4.0, <= 6.4.9, >= 6.5.0, <= 6.5.9, >= 6.6.0, <= 6.6.6, >= 6.7.0, <= 6.7.6, >= 6.8.0, <= 6.8.7, >= 6.9.0, <= 6.9.6, >= 7.0.0, <= 7.0.3 4.7.35, 4.8.30, 4.9.31, 5.0.27, 5.1.24, 5.2.26, 5.3.23, 5.4.21, 5.5.20, 5.6.19, 5.7.17, 5.8.15, 5.9.16, 6.0.14, 6.1.12, 6.2.11, 6.3.10, 6.4.10, 6.5.10, 6.6.7, 6.7.7, 6.8.8, 6.9.7, 7.0.4
17.07.2026

WordPress Core 6.8 - 7.0.1 - Unauthenticated SQL Injection via author__not_in Parameter

Hoch · 7.5 In Angriffen ausgenutzt CVE-2026-60137 >= 6.8, < 6.8.5, >= 6.9, < 6.9.5, >= 7.0, < 7.0.2 6.8.6, 6.9.5, 7.0.2
17.07.2026

WordPress Core 6.9 - 7.0.1 - Remote Code Execution via REST API Batch Request Route Confusion

Kritisch · 9.8 In Angriffen ausgenutzt CVE-2026-63030 >= 6.9, < 6.9.5, >= 7.0, < 7.0.2 6.9.5, 7.0.2
09.04.2024

WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block

Hoch · 7.2 CVE-2024-4439 >= 6.0, <= 6.0.7, >= 6.1, <= 6.1.5, >= 6.2, <= 6.2.4, >= 6.3, <= 6.3.3, >= 6.4, <= 6.4.3, >= 6.5, <= 6.5.1 6.0.8, 6.1.6, 6.2.5, 6.3.4, 6.4.4, 6.5.2
06.12.2023

WordPress Core 6.4.0 - 6.4.1 - Remote Code Execution POP Chain

Kritisch · 9.8 CVE-2024-31211 = 6.4.0, = 6.4.1 6.4.2
18.10.2022

WordPress Core < 6.0.3 - SQL Injection via WP_Date_Query

Kritisch · 9.8 ff4b47d8-28c1-4706-91d9-0285f419147e <= 3.6.1, >= 3.7, <= 3.7.39, >= 3.8, <= 3.8.39, >= 3.9, <= 3.9.37, >= 4.0, <= 4.0.36, >= 4.1, <= 4.1.36, >= 4.2, <= 4.2.33, >= 4.3, <= 4.3.29, >= 4.4, <= 4.4.28, >= 4.5, <= 4.5.27, >= 4.6, <= 4.6.24, >= 4.7, <= 4.7.24, >= 4.8, <= 4.8.20, >= 4.9, <= 4.9.21, >= 5.0, <= 5.0.17, >= 5.1, <= 5.1.14, >= 5.2, <= 5.2.16, >= 5.3, <= 5.3.13, >= 5.4, <= 5.4.11, >= 5.5, <= 5.5.10, >= 5.6, <= 5.6.9, >= 5.7, <= 5.7.7, >= 5.8, <= 5.8.5, >= 5.9, <= 5.9.4, >= 6.0, <= 6.0.2 3.7.40, 3.8.40, 3.9.38, 4.0.37, 4.1.37, 4.2.34, 4.3.30, 4.4.29, 4.5.28, 4.6.25, 4.7.25, 4.8.21, 4.9.22, 5.0.18, 5.1.15, 5.2.17, 5.3.14, 5.4.12, 5.5.11, 5.6.10, 5.7.8, 5.8.6, 5.9.5, 6.0.3
18.10.2022

WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php

Hoch · 8.8 ddd06190-d0c1-445d-8c6f-4c7df3248db4 <= 3.6.1, >= 3.7, <= 3.7.39, >= 3.8, <= 3.8.39, >= 3.9, <= 3.9.37, >= 4.0, <= 4.0.36, >= 4.1, <= 4.1.36, >= 4.2, <= 4.2.33, >= 4.3, <= 4.3.29, >= 4.4, <= 4.4.28, >= 4.5, <= 4.5.27, >= 4.6, <= 4.6.24, >= 4.7, <= 4.7.24, >= 4.8, <= 4.8.20, >= 4.9, <= 4.9.21, >= 5.0, <= 5.0.17, >= 5.1, <= 5.1.14, >= 5.2, <= 5.2.16, >= 5.3, <= 5.3.13, >= 5.4, <= 5.4.11, >= 5.5, <= 5.5.10, >= 5.6, <= 5.6.9, >= 5.7, <= 5.7.7, >= 5.8, <= 5.8.5, >= 5.9, <= 5.9.4, >= 6.0, <= 6.0.2 3.7.40, 3.8.40, 3.9.38, 4.0.37, 4.1.37, 4.2.34, 4.3.30, 4.4.29, 4.5.28, 4.6.25, 4.7.25, 4.8.21, 4.9.22, 5.0.18, 5.1.15, 5.2.17, 5.3.14, 5.4.12, 5.5.11, 5.6.10, 5.7.8, 5.8.6, 5.9.5, 6.0.3
18.10.2022

WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection

Hoch · 8.8 CVE-2022-43497 <= 3.6.1, >= 3.7, <= 3.7.39, >= 3.8, <= 3.8.39, >= 3.9, <= 3.9.37, >= 4.0, <= 4.0.36, >= 4.1, <= 4.1.36, >= 4.2, <= 4.2.33, >= 4.3, <= 4.3.29, >= 4.4, <= 4.4.28, >= 4.5, <= 4.5.27, >= 4.6, <= 4.6.24, >= 4.7, <= 4.7.24, >= 4.8, <= 4.8.20, >= 4.9, <= 4.9.21, >= 5.0, <= 5.0.17, >= 5.1, <= 5.1.14, >= 5.2, <= 5.2.16, >= 5.3, <= 5.3.13, >= 5.4, <= 5.4.11, >= 5.5, <= 5.5.10, >= 5.6, <= 5.6.9, >= 5.7, <= 5.7.7, >= 5.8, <= 5.8.5, >= 5.9, <= 5.9.4, >= 6.0, <= 6.0.2 3.7.40, 3.8.40, 3.9.38, 4.0.37, 4.1.37, 4.2.34, 4.3.30, 4.4.29, 4.5.28, 4.6.25, 4.7.25, 4.8.21, 4.9.22, 5.0.18, 5.1.15, 5.2.17, 5.3.14, 5.4.12, 5.5.11, 5.6.10, 5.7.8, 5.8.6, 5.9.5, 6.0.3
30.08.2022

WordPress Core < 6.0.2 - Authenticated SQL Injection

Hoch · 8.0 0248f829-84de-40b9-bb63-354fbf06472d <= 3.6.1, >= 3.7, <= 3.7.38, >= 3.8, <= 3.8.38, >= 3.9, <= 3.9.36, >= 4.0, <= 4.0.35, >= 4.1, <= 4.1.35, >= 4.2, <= 4.2.32, >= 4.3, <= 4.3.28, >= 4.4, <= 4.4.27, >= 4.5, <= 4.5.26, >= 4.6, <= 4.6.23, >= 4.7, <= 4.7.23, >= 4.8, <= 4.8.19, >= 4.9, <= 4.9.20, >= 5.0, <= 5.0.16, >= 5.1, <= 5.1.13, >= 5.2, <= 5.2.15, >= 5.3, <= 5.3.12, >= 5.4, <= 5.4.10, >= 5.5, <= 5.5.9, >= 5.6, <= 5.6.8, >= 5.7, <= 5.7.6, >= 5.8, <= 5.8.4, >= 5.9, <= 5.9.3, >= 6.0, <= 6.0.1 3.7.39, 3.8.39, 3.9.37, 4.0.36, 4.1.36, 4.2.33, 4.3.29, 4.4.28, 4.5.27, 4.6.24, 4.7.24, 4.8.20, 4.9.21, 5.0.17, 5.1.14, 5.2.16, 5.3.13, 5.4.11, 5.5.10, 5.6.9, 5.7.7, 5.8.5, 5.9.4, 6.0.2
11.03.2022

WordPress Core < 5.9.1 - jQuery Prototype Pollution

Hoch · 8.8 CVE-2021-20083 < 3.7, >= 3.7, <= 3.7.37, >= 3.8, <= 3.8.37, >= 3.9, <= 3.9.35, >= 4.0, <= 4.0.34, >= 4.1, <= 4.1.34, >= 4.2, <= 4.2.31, >= 4.3, <= 4.3.27, >= 4.4, <= 4.4.26, >= 4.5, <= 4.5.25, >= 4.6, <= 4.6.22, >= 4.7, <= 4.7.22, >= 4.8, <= 4.8.18, >= 4.9, <= 4.9.19, >= 5.0, <= 5.0.15, >= 5.1, <= 5.1.12, >= 5.2, <= 5.2.14, >= 5.3, <= 5.3.11, >= 5.4, <= 5.4.9, >= 5.5, <= 5.5.8, >= 5.6, <= 5.6.7, >= 5.7, <= 5.7.5, >= 5.8, <= 5.8.3, >= 5.9, <= 5.9.1 3.7.38, 3.8.38, 3.9.36, 4.0.35, 4.1.35, 4.2.32, 4.3.28, 4.4.27, 4.5.26, 4.6.23, 4.7.23, 4.8.19, 4.9.20, 5.0.16, 5.1.13, 5.2.15, 5.3.12, 5.4.10, 5.5.9, 5.6.8, 5.7.6, 5.8.4, 5.9.2
06.01.2022

WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting

Hoch · 8.0 CVE-2022-21662 >= 3.7, < 3.7.37, >= 3.8, < 3.8.37, >= 3.9, < 3.9.35, >= 4.0, < 4.0.34, >= 4.1, < 4.1.34, >= 4.2, < 4.2.31, >= 4.3, < 4.3.27, >= 4.4, < 4.4.26, >= 4.5, < 4.5.25, >= 4.6, < 4.6.22, >= 4.7, < 4.7.22, >= 4.8, < 4.8.18, >= 4.9, < 4.9.19, >= 5.0, < 5.0.15, >= 5.1, < 5.1.12, >= 5.2, < 5.2.14, >= 5.3, < 5.3.11, >= 5.4, < 5.4.9, >= 5.5, < 5.5.8, >= 5.6, < 5.6.7, >= 5.7, < 5.7.5, >= 5.8, < 5.8.3 3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3
06.01.2022

WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query

Hoch · 7.4 CVE-2022-21664 >= 4.1, < 4.1.34, >= 4.2, < 4.2.31, >= 4.3, < 4.3.27, >= 4.4, < 4.4.26, >= 4.5, < 4.5.25, >= 4.6, < 4.6.22, >= 4.7, < 4.7.22, >= 4.8, < 4.8.18, >= 4.9, < 4.9.19, >= 5.0, < 5.0.15, >= 5.1, < 5.1.12, >= 5.2, < 5.2.14, >= 5.3, < 5.3.11, >= 5.4, < 5.4.9, >= 5.5, < 5.5.8, >= 5.6, < 5.6.7, >= 5.7, < 5.7.5, >= 5.8, < 5.8.3 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3
09.09.2021

WordPress Core 5.4 - 5.8 - Authenticated Stored Cross-Site Scripting

Hoch · 7.6 CVE-2021-39201 >= 5.4, < 5.4.7, >= 5.5, < 5.5.6, >= 5.6, < 5.6.5, >= 5.7, < 5.7.3, >= 5.8, < 5.8.1 5.4.7, 5.5.6, 5.6.5, 5.7.3, 5.8.1
15.04.2021

WordPress Core < 5.7.1 - XXE Injection

Hoch · 7.1 CVE-2021-29447 >= 4.7, < 4.7.20, >= 4.8, < 4.8.16, >= 4.9, < 4.9.17, >= 5.0, < 5.0.12, >= 5.1, < 5.1.9, >= 5.2, < 5.2.10, >= 5.3, < 5.3.7, >= 5.4, < 5.4.5, >= 5.5, < 5.5.4, >= 5.6, < 5.6.3, >= 5.7, < 5.7.1 4.7.20, 4.8.16, 4.9.17, 5.0.12, 5.1.9, 5.2.10, 5.3.7, 5.4.5, 5.5.4, 5.6.3, 5.7.1
06.01.2021

WordPress Core < 5.8.3 - SQL Injection via WP_Query

Hoch · 8.0 CVE-2022-21661 >= 3.7, < 3.7.37, >= 3.8, < 3.8.37, >= 3.9, < 3.9.35, >= 4.0, < 4.0.34, >= 4.1, < 4.1.34, >= 4.2, < 4.2.31, >= 4.3, < 4.3.27, >= 4.4, < 4.4.26, >= 4.5, < 4.5.25, >= 4.6, < 4.6.22, >= 4.7, < 4.7.22, >= 4.8, < 4.8.18, >= 4.9, < 4.9.19, >= 5.0, < 5.0.15, >= 5.1, < 5.1.12, >= 5.2, < 5.2.14, >= 5.3, < 5.3.11, >= 5.4, < 5.4.9, >= 5.5, < 5.5.8, >= 5.6, < 5.6.7, >= 5.7, < 5.7.5, >= 5.8, < 5.8.3 3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3
29.10.2020

WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC

Hoch · 8.8 CVE-2020-28035 < 3.7, >= 3.7, <= 3.7.34, >= 3.8, <= 3.8.34, >= 3.9, <= 3.9.32, >= 4.0, <= 4.0.31, >= 4.1, <= 4.1.31, >= 4.2, <= 4.2.28, >= 4.3, <= 4.3.24, >= 4.4, <= 4.4.23, >= 4.5, <= 4.5.22, >= 4.6, <= 4.6.19, >= 4.7, <= 4.7.18, >= 4.8, <= 4.8.14, >= 4.9, <= 4.9.15, >= 5.0, <= 5.0.10, >= 5.1, <= 5.1.6, >= 5.2, <= 5.2.7, >= 5.3, <= 5.3.4, >= 5.4, <= 5.4.2, >= 5.5, <= 5.5.1 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2
29.10.2020

WordPress Core < 5.5.2 - Deserialization Gadget

Hoch · 8.8 CVE-2020-28032 < 3.7, >= 3.7, <= 3.7.34, >= 3.8, <= 3.8.34, >= 3.9, <= 3.9.32, >= 4.0, <= 4.0.31, >= 4.1, <= 4.1.31, >= 4.2, <= 4.2.28, >= 4.3, <= 4.3.24, >= 4.4, <= 4.4.23, >= 4.5, <= 4.5.22, >= 4.6, <= 4.6.19, >= 4.7, <= 4.7.18, >= 4.8, <= 4.8.14, >= 4.9, <= 4.9.15, >= 5.0, <= 5.0.10, >= 5.1, <= 5.1.6, >= 5.2, <= 5.2.7, >= 5.3, <= 5.3.4, >= 5.4, <= 5.4.2, >= 5.5, <= 5.5.1 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2

Mehr anzeigen (20) 20 von 111 angezeigt

Erkennen Sie Schwachstellen in Ihrer Anwendung

Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.

Anwendung verbinden