Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

337,687

All time

Critical · Active

10,704

CVSS ≥ 9.0

New · 14 days

2,015

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4621–4650 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58821	medium	5.9/10	WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58820	medium	5.9/10	WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58819	critical	9.1/10	WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58818	medium	5.4/10	WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58817	medium	4.3/10	WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58816	low	3.5/10	WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58815	high	7.2/10	WordPress Aitasi Coming Soon Plugin <= 2.0.2 - Deserialization of untrusted data Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58814	medium	6.5/10	WordPress Stagtools Plugin <= 2.3.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58813	medium	4.3/10	WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58812	medium	6.5/10	WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58811	medium	5.9/10	WordPress Ultimate Client Dash Plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58810	medium	5.9/10	WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58809	high	7.1/10	WordPress To Lead For Salesforce Plugin <= 2.7.3.9 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58808	medium	6.5/10	WordPress prettyPhoto Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58807	high	7.1/10	WordPress Purge Varnish Cache Plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58806	high	7.1/10	WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58805	medium	5.9/10	WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58804	medium	4.3/10	WordPress WooCommerce Single Page Checkout Plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58802	medium	4.3/10	WordPress TrustMate.io – WooCommerce integration plugin <= 1.16.0 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58801	medium	5.4/10	WordPress Responder Plugin <= 4.3.8 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58800	medium	4.3/10	WordPress WP Email Template plugin <= 2.8.5 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58799	medium	4.3/10	WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58798	medium	4.3/10	WordPress BCM Duplicate Menu plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58797	medium	5.3/10	WordPress Ninja Charts plugin <= 3.3.5 - Sensitive Data Exposure vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58796	medium	6.5/10	WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58795	medium	4.3/10	WordPress Payoneer Checkout Plugin <= 3.4.0 - Content Spoofing Vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58794	medium	4.3/10	WordPress Notification for Telegram plugin <= 3.5 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58793	medium	6.5/10	WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58792	medium	4.3/10	WordPress Authors List plugin <= 2.0.6.2 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 10mo ago
CVE-2025-58791	medium	5.9/10	WordPress SEO Auto Linker Plugin <= 1.5.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 10mo ago