Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-47he-853j-8qdn
Vulnerability ID VCID-47he-853j-8qdn
Aliases CVE-2021-39200
Summary WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions output data of the function wp_die() can be leaked under certain conditions, which can include data like nonces. It can then be used to perform actions on your behalf. This has been patched in WordPress 5.8.1, along with any older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
epss 0.01767 https://api.first.org/data/v1/epss?cve=CVE-2021-39200
archlinux Medium https://security.archlinux.org/AVG-2373
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-39200
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39200
994060 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=994060
AVG-2373 https://security.archlinux.org/AVG-2373
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.82563
EPSS Score 0.01767
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:35:01.685414+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0