How many CVEs have a located fix in WordPress/wordpress-develop?

15 published CVEs have a fix traced to functions in WordPress/wordpress-develop, touching 19 functions across 15 files.

Which function in WordPress/wordpress-develop has been patched by the most CVEs?

unserialize in src/wp-includes/Requests/Utility/FilteredIterator.php has been changed by 2 CVE fixes, from 2020 to 2021.

How large is a typical CVE fix in WordPress/wordpress-develop?

The median fix changes 6 lines. 80% of fixes change 20 lines or fewer, and 73% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

#381 of 500 repositories

WordPress/wordpress-develop

Name: WordPress/wordpress-develop: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix January 6, 2022

15

CVE fixes located

Published CVEs

19

Functions patched

Distinct function sites

15

Files patched

Distinct source files

2019–2022

Years covered

By CVE publication date

Overview

15 published CVEs have a fix traced to functions in WordPress/wordpress-develop, the earliest published in 2019. Those fixes changed 19 distinct functions across 15 files, in 65 patch hunks.

Among the 500 repositories tracked here, WordPress/wordpress-develop ranks #381 by the number of CVEs with a located fix.

Most patched functions

Functions in WordPress/wordpress-develop changed by the most CVE fixes.

Most patched files

Files in WordPress/wordpress-develop changed by the most CVE fixes.

1src/wp-includes/formatting.php2 CVEs · 3 functions
2src/wp-includes/class-wp-tax-query.php2 CVEs · 2 functions
3src/wp-includes/Requests/Utility/FilteredIterator.php2 CVEs · 1 functions
4src/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php1 CVEs · 3 functions
5src/wp-includes/blocks.php1 CVEs · 2 functions
6src/wp-admin/includes/media.php1 CVEs · 1 functions
7src/wp-admin/includes/misc.php1 CVEs · 1 functions
8src/wp-includes/class-wp-meta-query.php1 CVEs · 1 functions
9src/wp-includes/class-wp-xmlrpc-server.php1 CVEs · 1 functions
10src/wp-includes/functions.php1 CVEs · 1 functions

Fix size

How much code a CVE fix in WordPress/wordpress-develop changes, with backports counted once.

6

Median lines changed

Added plus removed, per CVE

80%

Fixes of 20 lines or fewer

Share of CVE fixes

73%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in WordPress/wordpress-develop, and the functions each fix changed.

CVE-2022-21664
CVE-2022-21664find_compatible_table_alias
High · CVSS 8.8
EPSS 3.8%2022-01-06
SQL injection in WordPress
CVE-2022-21661clean_query
High · CVSS 8.0
EPSS 97.8%2022-01-06
Insecure Deserialization of untrusted data in rmccue/requests
CVE-2021-29476unserialize
Critical · CVSS 9.8
EPSS 2.1%2021-04-27
CVE-2020-28032
CVE-2020-28032unserialize
Critical · CVSS 9.8
EPSS 15.7%2020-10-31
CVE-2020-28036
CVE-2020-28036current_user_can
Critical · CVSS 9.8
EPSS 5.2%2020-10-31
CVE-2020-28037
CVE-2020-28037is_blog_installed
Critical · CVSS 9.8
EPSS 8.1%2020-10-31
CVE-2020-28039
CVE-2020-28039is_protected_meta
Critical · CVSS 9.1
EPSS 4.1%2020-10-31
CVE-2020-4047
CVE-2020-4047edit_form_image_editor
Medium · CVSS 6.8
EPSS 3.3%2020-06-12
CVE-2020-4048
CVE-2020-4048wp_validate_redirect
Medium · CVSS 5.7
EPSS 2.0%2020-06-12
CVE-2020-4049
CVE-2020-4049
Low · CVSS 2.4
EPSS 2.5%2020-06-12
CVE-2020-4050
CVE-2020-4050set_screen_options
Low · CVSS 3.5
EPSS 1.4%2020-06-12
CVE-2019-20041
CVE-2019-20041wp_kses_bad_protocol_once
Critical · CVSS 9.8
EPSS 4.5%2019-12-27

Get an alert for each new WordPress/wordpress-develop CVE, with the patched functions and AI-written analysis.

Monitor wordpress-develop CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

0xJacky/nginx-ui15 CVEs apache/mynewt-nimble15 CVEs cubecart/v615 CVEs debian/busybox15 CVEs debian/libsoup315 CVEs debian/zziplib15 CVEs decolua/9router15 CVEs DSpace/DSpace15 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in WordPress/wordpress-develop.

How many CVEs have a located fix in WordPress/wordpress-develop?: 15 published CVEs have a fix traced to functions in WordPress/wordpress-develop, touching 19 functions across 15 files.
Which function in WordPress/wordpress-develop has been patched by the most CVEs?: unserialize in src/wp-includes/Requests/Utility/FilteredIterator.php has been changed by 2 CVE fixes, from 2020 to 2021.
How large is a typical CVE fix in WordPress/wordpress-develop?: The median fix changes 6 lines. 80% of fixes change 20 lines or fewer, and 73% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track WordPress/wordpress-develop CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing