CyberSecBulletin

Wordpressdotorg vulnerabilities

We track 1 vulnerability in Wordpressdotorg products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2025.

1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score

Latest Wordpressdotorg vulnerabilities

  • 7.2 High severity

    WordPress Importer: Deserialization of Untrusted Data

    CVE-2024-13889Wordpressdotorg

    The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.8.3 via deserialization of untrusted input in the 'maybe_unserialize' function. This makes it possible for authenticated attackers, with A