Feed live
WordPress vulnerabilities - every known CVE across core, plugins, and themes
WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.
Total CVEs tracked
—
All time
Critical · Active
—
CVSS ≥ 9.0
New · 14 days
—
Newly disclosed
Feed last synced
— No data
Data freshness
