wordpress
wordpresscounted 2026-10-08 03:20 UTC
As of 2026-10-08, 702 hosts ran wordpress with at least one known CVE on a service open at their latest check, across 139 versions with CVEs; 236 distinct CVEs.
Known CVEs on hosts running it
702hosts with known CVEs
236distinct CVEs
139versions with CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 139 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Versions with known CVEs
| Version | Hosts with CVEs | CVEs |
|---|---|---|
| 4.8.3 | 215 | 80 |
| 4.9.26 | 97 | 43 |
| 5.6.16 | 17 | 12 |
| 4.8.25 | 15 | 63 |
| 2.8 | 14 | 201 |
| 5.4.18 | 14 | 20 |
| 5.5.17 | 14 | 11 |
| 5.2.21 | 13 | 29 |
| 5.3.20 | 11 | 24 |
| 5.9.1 | 11 | 11 |
| 5.8.12 | 10 | 3 |
| 5.1.19 | 10 | 42 |
| 4.9.28 | 10 | 43 |
| 5.3.2 | 9 | 41 |
| 5.1.21 | 8 | 42 |
| 5.0.22 | 7 | 43 |
| 5.7.14 | 6 | 9 |
| 5.4.2 | 6 | 29 |
| 5.9.12 | 6 | 3 |
| 4.3.33 | 6 | 116 |
| 4.9.3 | 5 | 73 |
| 5.8.10 | 5 | 3 |
| 5.8 | 5 | 15 |
| 4.6.1 | 4 | 113 |
| 5.1.1 | 4 | 59 |
| 4.6.29 | 4 | 96 |
| 4.9.8 | 4 | 69 |
| 5.7.2 | 4 | 17 |
| 6.1.1 | 3 | 8 |
| 5.2.1 | 3 | 60 |
| 5.2.23 | 3 | 29 |
| 4.7.29 | 3 | 73 |
| 4.7.31 | 3 | 73 |
| 5.2.2 | 3 | 60 |
| 5.8.1 | 3 | 14 |
| 5.8.2 | 3 | 14 |
| 3.9.40 | 3 | 131 |
| 4.7.2 | 3 | 107 |
| 4.8.2 | 3 | 84 |
| 4.9.4 | 3 | 73 |
| 5.0.24 | 3 | 43 |
| 5.3.17 | 3 | 24 |
| 5.5.1 | 3 | 29 |
| 6.4.2 | 2 | 2 |
| 3.6.1 | 2 | 145 |
| 4.3.1 | 2 | 133 |
| 4.8.4 | 2 | 80 |
| 4.9.5 | 2 | 70 |
| 5.0.3 | 2 | 61 |
| 5.7.1 | 2 | 18 |
89 more versions
| 5.9.2 | 2 hosts |
| 3.3.1 | 2 hosts |
| 3.8.1 | 2 hosts |
| 4.1.42 | 2 hosts |
| 4.3.31 | 2 hosts |
| 4.4.1 | 2 hosts |
| 4.4.4 | 2 hosts |
| 4.7.5 | 2 hosts |
| 4.8.1 | 2 hosts |
| 4.8.27 | 2 hosts |
| 4.9.1 | 2 hosts |
| 4.9.10 | 2 hosts |
| 4.9.16 | 2 hosts |
| 5.0.11 | 2 hosts |
| 5.1 | 2 hosts |
| 5.1.16 | 2 hosts |
| 5.5 | 2 hosts |
| 5.5.3 | 2 hosts |
| 5.5.9 | 2 hosts |
| 5.7 | 2 hosts |
| 6.2 | 2 hosts |
| 4.4.33 | 1 hosts |
| 6.0.11 | 1 hosts |
| 3.5.1 | 1 hosts |
| 5.9.10 | 1 hosts |
| 3.6 | 1 hosts |
| 4.0 | 1 hosts |
| 4.4.10 | 1 hosts |
| 4.9.14 | 1 hosts |
| 5.4.16 | 1 hosts |
| 5.5.15 | 1 hosts |
| 5.6.14 | 1 hosts |
| 6.0 | 1 hosts |
| 6.2.2 | 1 hosts |
| 3.0.5 | 1 hosts |
| 3.4.1 | 1 hosts |
| 3.7.41 | 1 hosts |
| 3.8.34 | 1 hosts |
| 3.8.41 | 1 hosts |
| 3.9.1 | 1 hosts |
| 3.9.34 | 1 hosts |
| 4.0.1 | 1 hosts |
| 4.0.38 | 1 hosts |
| 4.1.1 | 1 hosts |
| 4.1.34 | 1 hosts |
| 4.2.15 | 1 hosts |
| 4.3.25 | 1 hosts |
| 4.3.34 | 1 hosts |
| 4.4 | 1 hosts |
| 4.4.15 | 1 hosts |
| 4.4.34 | 1 hosts |
| 4.5.14 | 1 hosts |
| 4.6.12 | 1 hosts |
| 4.6.4 | 1 hosts |
| 4.6.6 | 1 hosts |
| 4.7 | 1 hosts |
| 4.7.14 | 1 hosts |
| 4.7.25 | 1 hosts |
| 4.7.27 | 1 hosts |
| 4.7.3 | 1 hosts |
| 4.7.9 | 1 hosts |
| 4.9 | 1 hosts |
| 4.9.13 | 1 hosts |
| 4.9.18 | 1 hosts |
| 4.9.22 | 1 hosts |
| 4.9.23 | 1 hosts |
| 4.9.25 | 1 hosts |
| 4.9.27 | 1 hosts |
| 5.1.13 | 1 hosts |
| 5.1.14 | 1 hosts |
| 5.1.3 | 1 hosts |
| 5.1.4 | 1 hosts |
| 5.2.20 | 1 hosts |
| 5.2.4 | 1 hosts |
| 5.3 | 1 hosts |
| 5.4.1 | 1 hosts |
| 5.5.12 | 1 hosts |
| 5.5.14 | 1 hosts |
| 5.5.16 | 1 hosts |
| 5.6.10 | 1 hosts |
| 5.7.5 | 1 hosts |
| 5.8.3 | 1 hosts |
| 5.8.9 | 1 hosts |
| 5.9 | 1 hosts |
| 5.9.9 | 1 hosts |
| 6.0.3 | 1 hosts |
| 6.0.5 | 1 hosts |
| 6.0.8 | 1 hosts |
| 6.4.3 | 1 hosts |
27 more versions were seen only in older observations.
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2023-22622 MEDIUM 5.3 | 697 |
| CVE-2022-4973 MEDIUM 5.4 | 690 |
| CVE-2022-3590 MEDIUM 5.9 | 658 |
| CVE-2022-21664 HIGH 8.8 | 650 |
| CVE-2022-21663 HIGH 7.2 | 650 |
| CVE-2022-21662 MEDIUM 5.4 | 650 |
| CVE-2021-44223 CRITICAL 9.8 | 639 |
| CVE-2018-19296 HIGH 8.8 | 604 |
| CVE-2020-28032 CRITICAL 9.8 | 583 |
| CVE-2020-28035 CRITICAL 9.8 | 583 |
| CVE-2020-28036 CRITICAL 9.8 | 583 |
| CVE-2020-28037 CRITICAL 9.8 | 583 |
| CVE-2020-28039 CRITICAL 9.1 | 583 |
| CVE-2020-28033 HIGH 7.5 | 583 |
| CVE-2020-28034 MEDIUM 6.1 | 583 |
| CVE-2020-28038 MEDIUM 6.1 | 583 |
| CVE-2020-28040 MEDIUM 4.3 | 583 |
| CVE-2020-25286 MEDIUM 5.3 | 557 |
| CVE-2020-11028 HIGH 7.5 | 556 |
| CVE-2020-11030 MEDIUM 5.4 | 556 |
| CVE-2021-29450 MEDIUM 4.3 | 553 |
| CVE-2019-20041 CRITICAL 9.8 | 533 |
| CVE-2019-16781 MEDIUM 5.4 | 533 |
| CVE-2019-17669 CRITICAL 9.8 | 514 |
| CVE-2019-17670 CRITICAL 9.8 | 514 |
| CVE-2019-17675 HIGH 8.8 | 514 |
| CVE-2019-17673 HIGH 7.5 | 514 |
| CVE-2019-16217 MEDIUM 6.1 | 514 |
| CVE-2019-16218 MEDIUM 6.1 | 514 |
| CVE-2019-16219 MEDIUM 6.1 | 514 |
| CVE-2019-16220 MEDIUM 6.1 | 514 |
| CVE-2019-16221 MEDIUM 6.1 | 514 |
| CVE-2019-16222 MEDIUM 6.1 | 514 |
| CVE-2019-17672 MEDIUM 6.1 | 514 |
| CVE-2019-16223 MEDIUM 5.4 | 514 |
| CVE-2019-17674 MEDIUM 5.4 | 514 |
| CVE-2019-17671 MEDIUM 5.3 | 514 |
| CVE-2019-20042 MEDIUM 6.1 | 511 |
| CVE-2019-16780 MEDIUM 5.4 | 511 |
| CVE-2019-20043 MEDIUM 4.3 | 511 |
| CVE-2020-11025 MEDIUM 5.4 | 483 |
| CVE-2019-9787 HIGH 8.8 | 480 |
| CVE-2019-8943 MEDIUM 6.5 | 466 |
| CVE-2024-31210 HIGH 8.8 | 414 |
| CVE-2023-2745 MEDIUM 5.4 | 403 |
| CVE-2022-43497 MEDIUM 6.1 | 388 |
| CVE-2022-43500 MEDIUM 6.1 | 388 |
| CVE-2022-43504 MEDIUM 5.3 | 388 |
| CVE-2023-39999 MEDIUM 4.3 | 376 |
| CVE-2023-5561 MEDIUM 5.3 | 353 |
| CVE-2018-20148 CRITICAL 9.8 | 346 |
| CVE-2018-1000773 HIGH 8.8 | 346 |
| CVE-2019-8942 HIGH 8.8 | 346 |
| CVE-2018-20151 HIGH 7.5 | 346 |
| CVE-2018-20147 MEDIUM 6.5 | 346 |
| CVE-2018-20152 MEDIUM 6.5 | 346 |
| CVE-2018-20150 MEDIUM 6.1 | 346 |
| CVE-2018-20149 MEDIUM 5.4 | 346 |
| CVE-2018-20153 MEDIUM 5.4 | 346 |
| CVE-2022-21661 HIGH 7.5 | 344 |
| CVE-2018-12895 HIGH 8.8 | 342 |
| CVE-2018-10100 MEDIUM 6.1 | 340 |
| CVE-2018-10101 MEDIUM 6.1 | 340 |
| CVE-2018-10102 MEDIUM 6.1 | 340 |
| CVE-2018-6389 HIGH 7.5 | 332 |
| CVE-2018-5776 MEDIUM 6.1 | 332 |
| CVE-2017-17091 HIGH 8.8 | 330 |
| CVE-2017-17092 MEDIUM 5.4 | 330 |
| CVE-2017-17093 MEDIUM 5.4 | 330 |
| CVE-2017-17094 MEDIUM 5.4 | 330 |
| CVE-2017-1000600 HIGH 8.8 | 329 |
| CVE-2020-36326 CRITICAL 9.8 | 327 |
| CVE-2020-4047 MEDIUM 6.8 | 304 |
| CVE-2020-4048 MEDIUM 5.7 | 304 |
| CVE-2020-4046 MEDIUM 5.4 | 304 |
| CVE-2020-4050 LOW 3.1 | 304 |
| CVE-2020-4049 LOW 2.4 | 304 |
| CVE-2020-11027 HIGH 8.1 | 302 |
| CVE-2020-11029 MEDIUM 6.1 | 302 |
| CVE-2020-11026 MEDIUM 5.4 | 302 |
| CVE-2021-39201 MEDIUM 5.4 | 175 |
| CVE-2021-39200 MEDIUM 5.3 | 136 |
| CVE-2017-16510 CRITICAL 9.8 | 95 |
| CVE-2012-6707 HIGH 7.5 | 95 |
| CVE-2016-9263 MEDIUM 4.7 | 95 |
| CVE-2017-14723 CRITICAL 9.8 | 92 |
| CVE-2017-14718 MEDIUM 6.1 | 92 |
| CVE-2017-14720 MEDIUM 6.1 | 92 |
| CVE-2017-14721 MEDIUM 6.1 | 92 |
| CVE-2017-14724 MEDIUM 6.1 | 92 |
| CVE-2017-14726 MEDIUM 6.1 | 92 |
| CVE-2017-14725 MEDIUM 5.4 | 92 |
| CVE-2017-9064 HIGH 8.8 | 78 |
| CVE-2017-9062 HIGH 8.6 | 78 |
| CVE-2017-9066 HIGH 8.6 | 78 |
| CVE-2017-9065 HIGH 7.5 | 78 |
| CVE-2017-9061 MEDIUM 6.1 | 78 |
| CVE-2017-9063 MEDIUM 6.1 | 78 |
| CVE-2017-8295 MEDIUM 5.9 | 78 |
| CVE-2017-6814 MEDIUM 5.4 | 77 |
Hosts: matches on services open at each host's latest check, over every version.