Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,530

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,089

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5281–5310 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-58831	medium	4.3/10	WordPress Parallax Scrolling Enllax.js Plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58830	medium	6.5/10	WordPress Parallax Scrolling Enllax.js Plugin <= 0.0.6 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58829	medium	4.9/10	WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58828	medium	6.5/10	WordPress 코드엠샵 소셜톡 plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58827	low	3.8/10	WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58826	medium	6.5/10	WordPress WP Publication Archive Plugin <= 3.0.1 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58825	medium	5.9/10	WordPress Comment Form WP – Customize Default Comment Form plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58824	medium	4.3/10	WordPress Shk Corporate Theme <= 2.4.1.1 - Broken Access Control Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58823	medium	6.5/10	WordPress Get Cash plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58822	medium	6.5/10	WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58821	medium	5.9/10	WordPress WP Notification Bell plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58820	medium	5.9/10	WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58819	critical	9.1/10	WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58818	medium	5.4/10	WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58817	medium	4.3/10	WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58816	low	3.5/10	WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58815	high	7.2/10	WordPress Aitasi Coming Soon Plugin <= 2.0.2 - Deserialization of untrusted data Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58814	medium	6.5/10	WordPress Stagtools Plugin <= 2.3.8 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58813	medium	4.3/10	WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58812	medium	6.5/10	WordPress Best Restaurant Menu by PriceListo Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58811	medium	5.9/10	WordPress Ultimate Client Dash Plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58810	medium	5.9/10	WordPress Simple Link List Widget Plugin <= 0.3.2 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58809	high	7.1/10	WordPress To Lead For Salesforce Plugin <= 2.7.3.9 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58808	medium	6.5/10	WordPress prettyPhoto Plugin <= 1.2.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58807	high	7.1/10	WordPress Purge Varnish Cache Plugin <= 2.6 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58806	high	7.1/10	WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58805	medium	5.9/10	WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58804	medium	4.3/10	WordPress WooCommerce Single Page Checkout Plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58802	medium	4.3/10	WordPress TrustMate.io – WooCommerce integration plugin <= 1.16.0 - Cross Site Request Forgery (CSRF) vulnerability	Sep 5, 2025 12mo ago
CVE-2025-58801	medium	5.4/10	WordPress Responder Plugin <= 4.3.8 - Cross Site Request Forgery (CSRF) Vulnerability	Sep 5, 2025 12mo ago