Is WordPress 3.9.40 patched?
WordPress · cycle 3.9 · end of life · Official site ↗
0/100Critical · exploited
Minimum safe version5.8.9
3.9.40 has 49 open critical-or-high vulnerabilities. Run 5.8.9 or later to clear them. See what 5.8.9 fixes →
Known issues affecting 3.9.40
Exploited first, then by exploitation probability.
CVE-2016-10033 CRITICAL ● exploited EPSS 94% → see advisory CVE-2019-8943 MEDIUM EPSS 94% → see advisory CVE-2019-8942 HIGH EPSS 93% → fixed in 4.9.9 CVE-2016-10045 CRITICAL EPSS 93% → see advisory CVE-2017-5487 MEDIUM EPSS 92% → see advisory CVE-2018-12895 HIGH EPSS 90% → fixed in 4.9.7 CVE-2018-6389 HIGH EPSS 87% → see advisory CVE-2019-9787 HIGH EPSS 81% → fixed in 5.1.1 CVE-2023-2745 MEDIUM EPSS 79% → fixed in 6.1.2 CVE-2017-8295 MEDIUM EPSS 77% → see advisory CVE-2019-17671 MEDIUM EPSS 73% → fixed in 5.2.4 CVE-2018-20148 CRITICAL EPSS 55% → fixed in 5.0.1 CVE-2015-5623 MEDIUM EPSS 48% → see advisory CVE-2015-5714 MEDIUM EPSS 31% → see advisory CVE-2016-6897 MEDIUM EPSS 30% → see advisory CVE-2015-5715 MEDIUM EPSS 29% → see advisory CVE-2020-28032 CRITICAL EPSS 28% → fixed in 5.5.2 CVE-2018-1000773 HIGH EPSS 28% → see advisory CVE-2021-44223 HIGH EPSS 27% → fixed in 5.8 CVE-2015-2213 HIGH EPSS 21% → see advisory