Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

337,727

All time

Critical · Active

10,704

CVSS ≥ 9.0

New · 14 days

2,049

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 4681–4710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58617	medium	4.3/10	WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58616	medium	6.5/10	WordPress Frisbii Pay Plugin <= 1.8.2.1 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58615	medium	4.4/10	WordPress WP Bannerize Pro Plugin <= 1.10.0 - Server Side Request Forgery (SSRF) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58614	medium	6.5/10	WordPress Tooltipy Plugin <= 5.5.6 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58613	medium	5.3/10	WordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58612	medium	6.5/10	WordPress PropertyHive Plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58611	medium	4.3/10	WordPress Tickera Plugin <= 3.5.5.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58610	medium	6.5/10	WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58609	medium	6.5/10	WordPress Latest Post Shortcode Plugin <= 14.0.3 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58608	high	7.5/10	WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58607	medium	6.5/10	WordPress Cookie Notice & Consent Banner for GDPR & CCPA Compliance Plugin <= 1.7.11 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58606	medium	5.0/10	WordPress SaasLauncher Theme <= 1.3.0 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58605	medium	6.5/10	WordPress WP Delicious Plugin <= 1.8.7 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58604	high	7.6/10	WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58603	medium	5.3/10	WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58602	medium	6.5/10	WordPress If-So Dynamic Content Personalization Plugin <= 1.9.4 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58601	medium	4.3/10	WordPress Classified Listing Plugin <= 5.0.6 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58600	medium	5.3/10	WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58599	medium	4.3/10	WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58598	medium	6.6/10	WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58597	medium	4.3/10	WordPress wpForo Forum Plugin <= 2.4.6 - Insecure Direct Object References (IDOR) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58596	medium	5.9/10	WordPress MailOptin Plugin <= 1.2.75.0 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58594	medium	4.3/10	WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58593	medium	6.5/10	WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability	Sep 3, 2025 10mo ago
CVE-2025-3701	medium	4.3/10	WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability	Sep 3, 2025 10mo ago
CVE-2025-58210	medium	5.3/10	WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability	Sep 3, 2025 10mo ago
CVE-2024-32444	critical	9.8/10	WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability	Sep 3, 2025 10mo ago
CVE-2025-31100	critical	9.9/10	WordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload Vulnerability	Aug 31, 2025 10mo ago
CVE-2025-47696	high	8.1/10	WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability	Aug 31, 2025 10mo ago
CVE-2024-32832	critical	9.8/10	WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability	Aug 31, 2025 10mo ago