Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

337,225

All time

Critical · Active

10,661

CVSS ≥ 9.0

New · 14 days

1,813

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 3091–3120 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-53438	high	8.1/10	WordPress FitLine theme <= 1.6 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53437	high	8.1/10	WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53436	high	8.1/10	WordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53435	high	8.1/10	WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53434	high	8.1/10	WordPress ChildHope theme <= 1.1.8 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53433	critical	9.8/10	WordPress EasyEat theme <= 1.9.0 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53432	high	8.1/10	WordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53431	high	8.1/10	WordPress Emberlyn theme <= 1.3.1 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53430	high	8.1/10	WordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-53429	high	8.1/10	WordPress Exit Game theme <= 1.4.3 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-52768	high	8.1/10	WordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-52745	high	8.1/10	WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49943	high	8.1/10	WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49942	high	8.1/10	WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49941	high	8.1/10	WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49919	medium	5.8/10	WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49918	medium	5.9/10	WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49914	medium	6.5/10	WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49902	medium	6.5/10	WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49379	high	7.2/10	WordPress Custom Fields Account Registration For Woocommerce plugin <= 1.2 - Privilege Escalation vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49371	high	8.1/10	WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49370	high	8.1/10	WordPress Lymcoin theme <= 1.3.12 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49369	high	8.1/10	WordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49368	high	8.1/10	WordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49367	high	8.1/10	WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49366	high	8.1/10	WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49365	high	8.1/10	WordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49364	high	8.1/10	WordPress Ludos Paradise theme <= 2.1.3 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49363	high	8.1/10	WordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago
CVE-2025-49362	high	8.1/10	WordPress Gracioza theme <= 1.0.15 - Local File Inclusion vulnerability	Dec 18, 2025 6mo ago