Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,525

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,106

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 3751–3780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-53453	high	8.1/10	WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53449	high	8.1/10	WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53448	high	8.1/10	WordPress Rally theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53447	high	8.1/10	WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53446	high	8.1/10	WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53445	high	8.1/10	WordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53443	high	8.1/10	WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53442	high	8.1/10	WordPress Rentic theme <= 1.1 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53441	high	8.1/10	WordPress Greeny theme <= 2.6 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53439	high	8.1/10	WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53438	high	8.1/10	WordPress FitLine theme <= 1.6 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53437	high	8.1/10	WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53436	high	8.1/10	WordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53435	high	8.1/10	WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53434	high	8.1/10	WordPress ChildHope theme <= 1.1.8 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53433	critical	9.8/10	WordPress EasyEat theme <= 1.9.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53432	high	8.1/10	WordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53431	high	8.1/10	WordPress Emberlyn theme <= 1.3.1 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53430	high	8.1/10	WordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-53429	high	8.1/10	WordPress Exit Game theme <= 1.4.3 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-52768	high	8.1/10	WordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-52745	high	8.1/10	WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49943	high	8.1/10	WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49942	high	8.1/10	WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49941	high	8.1/10	WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49919	medium	5.8/10	WordPress eRoom plugin <= 1.5.6 - Sensitive Data Exposure vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49918	medium	5.9/10	WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49914	medium	6.5/10	WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49902	medium	6.5/10	WordPress Login Page Customizer – Customizer Login Page, Admin Page, Custom Design plugin <= 2.1.1 - Broken Access Control vulnerability	Dec 18, 2025 8mo ago
CVE-2025-49379	high	7.2/10	WordPress Custom Fields Account Registration For Woocommerce plugin <= 1.2 - Privilege Escalation vulnerability	Dec 18, 2025 8mo ago