wordpress 5.4.18
wordpressevery versioncounted 2026-10-31 04:20 UTC
As of 2026-10-31, 14 hosts ran wordpress 5.4.18 with at least one known CVE on a service open at their latest check; 20 distinct CVEs match this version.
Known CVEs on hosts running it
14hosts with known CVEs
20distinct CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 5 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2020-28032 CRITICAL 9.8 | 14 |
| CVE-2020-28035 CRITICAL 9.8 | 14 |
| CVE-2020-28036 CRITICAL 9.8 | 14 |
| CVE-2020-28037 CRITICAL 9.8 | 14 |
| CVE-2021-44223 CRITICAL 9.8 | 14 |
| CVE-2020-28039 CRITICAL 9.1 | 14 |
| CVE-2018-19296 HIGH 8.8 | 14 |
| CVE-2022-21664 HIGH 8.8 | 14 |
| CVE-2020-28033 HIGH 7.5 | 14 |
| CVE-2022-21663 HIGH 7.2 | 14 |
| CVE-2020-28034 MEDIUM 6.1 | 14 |
| CVE-2020-28038 MEDIUM 6.1 | 14 |
| CVE-2022-3590 MEDIUM 5.9 | 14 |
| CVE-2021-39201 MEDIUM 5.4 | 14 |
| CVE-2022-21662 MEDIUM 5.4 | 14 |
| CVE-2022-4973 MEDIUM 5.4 | 14 |
| CVE-2021-39200 MEDIUM 5.3 | 14 |
| CVE-2023-22622 MEDIUM 5.3 | 14 |
| CVE-2020-28040 MEDIUM 4.3 | 14 |
| CVE-2021-29450 MEDIUM 4.3 | 14 |
Hosts: matches on services open at each host's latest check.