Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

337,225

All time

Critical · Active

10,661

CVSS ≥ 9.0

New · 14 days

1,813

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 3061–3090 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58890	high	8.1/10	WordPress Playful theme <= 1.19.0 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58889	high	8.1/10	WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58888	high	8.1/10	WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58885	high	8.1/10	WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58879	high	8.1/10	WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58877	high	7.5/10	WordPress Javo Core plugin <= 3.0.0.529 - Arbitrary Content Deletion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58803	high	8.1/10	WordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58710	high	8.8/10	WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58709	high	8.1/10	WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58708	high	8.1/10	WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58706	high	8.1/10	WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-58225	high	8.1/10	WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-57897	high	7.1/10	WordPress Logtik theme <= 2.3 - Cross Site Scripting (XSS) vulnerability	Dec 18, 2025 6mo ago
CVE-2025-55707	high	7.2/10	WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability	Dec 18, 2025 6mo ago
CVE-2025-54751	high	7.1/10	WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability	Dec 18, 2025 6mo ago
CVE-2025-54748	medium	6.5/10	WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability	Dec 18, 2025 6mo ago
CVE-2025-54745	medium	6.5/10	WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability	Dec 18, 2025 6mo ago
CVE-2025-54743	medium	5.8/10	WordPress Download After Email Plugin 2.1.5-2.1.6 - Other Vulnerability Type Vulnerability	Dec 18, 2025 6mo ago
CVE-2025-54741	medium	6.5/10	WordPress Super Blank Plugin <= 1.2.0 - Arbitrary Content Deletion Vulnerability	Dec 18, 2025 6mo ago
CVE-2025-54723	critical	9.8/10	WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53453	high	8.1/10	WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53449	high	8.1/10	WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53448	high	8.1/10	WordPress Rally theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53447	high	8.1/10	WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53446	high	8.1/10	WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53445	high	8.1/10	WordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53443	high	8.1/10	WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53442	high	8.1/10	WordPress Rentic theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53441	high	8.1/10	WordPress Greeny theme <= 2.6 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53439	high	8.1/10	WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago