Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,530

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,089

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 5221–5250 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-48103	medium	6.5/10	WordPress Today's Date Inserter plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-48317	high	7.5/10	WordPress WooCommerce Payment Gateway for Saferpay Plugin <= 0.4.9 - Path Traversal Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-48105	medium	6.5/10	WordPress Easy Flash Embed plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-53307	high	7.1/10	WordPress Assistant Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-49401	critical	9.8/10	WordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-54744	medium	6.5/10	WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability	Sep 5, 2025 12mo ago
CVE-2025-57889	high	7.5/10	WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58887	medium	6.5/10	WordPress Course Booking Platform Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58886	medium	5.9/10	WordPress Instant Locations Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58884	medium	5.9/10	WordPress vipdrv Plugin <= 1.0.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58883	medium	5.9/10	WordPress Search Cloud One Plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58882	medium	6.5/10	WordPress Simple Text Slider Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58881	high	8.5/10	WordPress New Simple Gallery Plugin <= 8.0 - SQL Injection Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58880	medium	6.5/10	WordPress Translate This gTranslate Shortcode Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58878	medium	6.5/10	WordPress Woocommerce Gifts Product Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58876	medium	6.5/10	WordPress Aparat Video Shortcode Plugin <= 0.2.4 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58875	medium	6.5/10	WordPress WP Github Gist Plugin <= 0.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58874	medium	6.5/10	WordPress StoryMap Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58873	medium	5.9/10	WordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58872	medium	6.5/10	WordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58871	medium	6.5/10	WordPress Master Paper Collapse Toggle Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58870	medium	6.5/10	WordPress WP-GraphViz Plugin <= 1.5.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58869	medium	6.5/10	WordPress SimaCookie Plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58868	medium	6.5/10	WordPress SimaCookie Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58867	medium	6.5/10	WordPress Easy Download Media Counter Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58866	low	2.7/10	WordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58865	medium	4.3/10	WordPress Compact Admin plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58864	medium	6.5/10	WordPress 金数据 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58863	medium	6.5/10	WordPress Zoomify embed for WP Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58862	medium	6.5/10	WordPress WordPress Events Calendar Plugin – connectDaily Plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago