수정 버전
6.0 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2026-87902 | An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable... | 8.1 | KEV | 95.8% | 2026-09-23 |
| CVE-2026-65640 | WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Au... | 8.8 | — | 2026-08-18 | |
| CVE-2022-3590 | WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding | 5.9 | — | 2022-12-14 | |
| CVE-2025-58674 | WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability | 5.9 | — | 2025-09-24 | |
| CVE-2023-5561 | WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure | 5.3 | — | 2023-10-17 | |
| CVE-2025-58246 | WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability | 4.3 | — | 2025-09-24 | |
| CVE-2025-54352 | WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.pi... | 3.7 | — | 2025-07-21 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).