Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

352,657

All time

Critical · Active

12,481

CVSS ≥ 9.0

New · 14 days

1,125

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 5281–5310 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58863	medium	6.5/10	WordPress Zoomify embed for WP Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58862	medium	6.5/10	WordPress WordPress Events Calendar Plugin – connectDaily Plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58861	high	7.1/10	WordPress Quick Event Calendar Plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58860	high	7.1/10	WordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58859	high	7.1/10	WordPress Add to Feedly Plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58858	medium	6.5/10	WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58857	high	7.1/10	WordPress Table of content Plugin <= 1.5.3.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58856	medium	6.5/10	WordPress Woocommerce Notify Updated Product Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58855	high	7.1/10	WordPress AP HoneyPot WordPress Plugin Plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58854	high	7.1/10	WordPress Ultimate AJAX Login Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58853	high	7.1/10	WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58852	high	7.1/10	WordPress MSTW League Manager Plugin <= 2.10 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58851	medium	6.5/10	WordPress Boxed Content Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58850	medium	6.5/10	WordPress Showpass WordPress Extension Plugin <= 4.0.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58849	high	7.1/10	WordPress Hide Real Download Path Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58848	high	7.1/10	WordPress WP likes Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58847	high	7.1/10	WordPress WN Flipbox Pro Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58846	high	7.1/10	WordPress WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule Plugin <= 2020.1.0 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58845	high	7.1/10	WordPress Bulk Watermark Plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58844	high	7.1/10	WordPress Database to Excel Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58843	high	7.1/10	WordPress Auto Last Youtube Video Plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58842	medium	6.5/10	WordPress Donation Forms WP by Givecloud Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58841	medium	5.5/10	WordPress Media Author Plugin <= 1.0.4 - Broken Access Control Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58840	medium	6.5/10	WordPress Custom Team Manager Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58839	high	7.2/10	WordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58838	medium	6.5/10	WordPress Smooth Accordion Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58837	medium	6.5/10	WordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58836	medium	6.5/10	WordPress FW Anker Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58835	medium	5.3/10	WordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability	Sep 5, 2025 1y ago
CVE-2025-58834	medium	6.5/10	WordPress short.io Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago