Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

337,798

All time

Critical · Active

10,717

CVSS ≥ 9.0

New · 14 days

2,116

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 4711–4740 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-32589	high	7.1/10	WordPress Barcode Scanner and Inventory manager plugin <= 1.5.3 - Broken Access Control to XSS vulnerability	Aug 31, 2025 10mo ago
CVE-2025-4956	medium	4.3/10	WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability	Aug 30, 2025 10mo ago
CVE-2025-54742	high	8.8/10	WordPress WpEvently Plugin <= 4.4.8 - PHP Object Injection Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54738	critical	9.8/10	WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54734	medium	5.8/10	WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54733	medium	6.5/10	WordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54731	high	8.1/10	WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54725	critical	9.8/10	WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54724	high	7.1/10	WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54720	critical	9.3/10	WordPress Nest Addons Plugin <= 1.6.3 - SQL Injection Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54716	high	8.1/10	WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54714	high	7.1/10	WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54710	high	7.1/10	WordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-54029	high	7.7/10	WordPress WooCommerce csv import export Plugin <= 2.0.6 - Arbitrary File Deletion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53588	high	7.7/10	WordPress UPC/EAN/GTIN Code Generator Plugin <= 2.0.2 - Arbitrary File Deletion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53584	high	8.1/10	WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53583	high	8.1/10	WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53579	high	7.1/10	WordPress Captcha.eu Plugin < 1.0.61 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53578	high	8.1/10	WordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53576	high	8.1/10	WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53572	high	8.1/10	WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53337	medium	5.4/10	WordPress LifePress plugin <= 2.1.3 - Broken Access Control vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53334	high	8.1/10	WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53328	high	7.5/10	WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53326	high	7.5/10	WordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53289	high	7.1/10	WordPress Theme Blvd Widget Areas Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53250	medium	6.4/10	WordPress Chartbeat Plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53248	high	8.1/10	WordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53247	high	8.1/10	WordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago
CVE-2025-53244	high	8.1/10	WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability	Aug 28, 2025 10mo ago