Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,543

All time

Critical · Active

12,233

CVSS ≥ 9.0

New · 14 days

3,049

Newly disclosed

Feed last synced

46 mins ago

Data freshness

Showing 5401–5430 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-53583	high	8.1/10	WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53579	high	7.1/10	WordPress Captcha.eu Plugin < 1.0.61 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53578	high	8.1/10	WordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53576	high	8.1/10	WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53572	high	8.1/10	WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53337	medium	5.4/10	WordPress LifePress plugin <= 2.1.3 - Broken Access Control vulnerability	Aug 28, 2025 1y ago
CVE-2025-53334	high	8.1/10	WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53328	high	7.5/10	WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53326	high	7.5/10	WordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53289	high	7.1/10	WordPress Theme Blvd Widget Areas Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53250	medium	6.4/10	WordPress Chartbeat Plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53248	high	8.1/10	WordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53247	high	8.1/10	WordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53244	high	8.1/10	WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53243	high	8.1/10	WordPress Employee Directory – Staff Listing & Team Directory plugin for WordPress plugin <= 4.5.5 - PHP Object Injection vulnerability	Aug 28, 2025 1y ago
CVE-2025-53230	high	7.6/10	WordPress Page Manager for Elementor Plugin <= 2.0.5 - Broken Access Control Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53227	high	8.1/10	WordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53225	high	7.1/10	WordPress e-Boekhouden.nl Plugin <= 1.9.3 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53224	high	7.1/10	WordPress NextGEN Gallery Search Plugin <= 2.12 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53223	high	7.1/10	WordPress Theme Switcher Reloaded Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53220	high	7.1/10	WordPress XmasB Quotes Plugin <= 1.6.1 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53216	high	8.1/10	WordPress Glamer Theme <= 1.0.2 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-53215	high	7.1/10	WordPress Yahoo! WebPlayer Plugin <= 2.0.6 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-52761	critical	9.8/10	WordPress WP Funnel Manager Plugin <= 1.4.0 - PHP Object Injection Vulnerability	Aug 28, 2025 1y ago
CVE-2025-49407	high	8.8/10	WordPress Houzez Theme <= 4.1.1 - Cross Site Scripting (XSS) Vulnerability	Aug 28, 2025 1y ago
CVE-2025-49405	medium	4.3/10	WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability	Aug 28, 2025 1y ago
CVE-2025-49404	high	8.5/10	WordPress Listeo-Core Plugin < 2.0.7 - SQL Injection Vulnerability	Aug 28, 2025 1y ago
CVE-2025-49402	high	8.5/10	WordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability	Aug 28, 2025 1y ago
CVE-2025-49388	critical	9.8/10	WordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerability	Aug 28, 2025 1y ago
CVE-2025-49387	critical	10.0/10	WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability	Aug 28, 2025 1y ago