Here's 100 WordPress exploits, found from the exploit search on metasploit.com - looks a lot like it's all plugins and themes (I haven't checked exhaustively):

http://www.rapid7.com/db/search?utf8=%E2%9C%93&q=WordPress&t...