Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,525

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,106

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 3721–3750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58901	high	8.1/10	WordPress Takeout theme <= 1.3.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58900	high	8.1/10	WordPress UniTravel theme <= 1.4.2 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58899	high	8.1/10	WordPress Frame theme <= 2.4.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58898	high	8.1/10	WordPress HealthHub theme <= 1.3.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58896	high	8.1/10	WordPress Otaku theme <= 1.8.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58895	high	8.1/10	WordPress Integro theme <= 1.8.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58894	high	8.1/10	WordPress Good Mood theme <= 1.16 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58893	high	8.1/10	WordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58892	high	8.1/10	WordPress Tourimo theme <= 1.2.3 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58891	high	8.1/10	WordPress Sanger theme <= 1.24.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58890	high	8.1/10	WordPress Playful theme <= 1.19.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58889	high	8.1/10	WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58888	high	8.1/10	WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58885	high	8.1/10	WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58879	high	8.1/10	WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58877	high	7.5/10	WordPress Javo Core plugin <= 3.0.0.529 - Arbitrary Content Deletion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58803	high	8.1/10	WordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58710	high	8.8/10	WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58709	high	8.1/10	WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58708	high	8.1/10	WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58706	high	8.1/10	WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-58225	high	8.1/10	WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-57897	high	7.1/10	WordPress Logtik theme <= 2.3 - Cross Site Scripting (XSS) vulnerability	Dec 18, 2025 8mo ago
CVE-2025-55707	high	7.2/10	WordPress PostX Plugin <= 4.1.35 - Privilege Escalation Vulnerability	Dec 18, 2025 8mo ago
CVE-2025-54751	high	7.1/10	WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability	Dec 18, 2025 8mo ago
CVE-2025-54748	medium	6.5/10	WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability	Dec 18, 2025 8mo ago
CVE-2025-54745	medium	6.5/10	WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability	Dec 18, 2025 8mo ago
CVE-2025-54743	medium	5.8/10	WordPress Download After Email Plugin 2.1.5-2.1.6 - Other Vulnerability Type Vulnerability	Dec 18, 2025 8mo ago
CVE-2025-54741	medium	6.5/10	WordPress Super Blank Plugin <= 1.2.0 - Arbitrary Content Deletion Vulnerability	Dec 18, 2025 8mo ago
CVE-2025-54723	critical	9.8/10	WordPress DentiCare Theme < 1.4.3 - PHP Object Injection Vulnerability	Dec 18, 2025 8mo ago