Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,596

All time

Critical · Active

12,236

CVSS ≥ 9.0

New · 14 days

3,063

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 5671–5700 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-54728	medium	4.3/10	WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54729	medium	5.9/10	WordPress Webba Booking Plugin <= 6.0.5 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54730	medium	5.3/10	WordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54732	medium	4.3/10	WordPress WPDM – Premium Packages Plugin <= 6.0.2 - Cross Site Request Forgery (CSRF) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54739	medium	5.3/10	WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54736	medium	5.3/10	WordPress Savoy Theme <= 3.0.8 - Sensitive Data Exposure Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54740	medium	6.5/10	WordPress Print My Blog Plugin <= 3.27.9 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54746	medium	6.5/10	WordPress Shortcode Redirect Plugin <= 1.0.02 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54749	medium	6.5/10	WordPress JetProductGallery Plugin <= 2.2.0.2 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54747	medium	6.5/10	WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55708	high	8.5/10	WordPress Quiz And Survey Master Plugin <= 10.2.4 - SQL Injection Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55709	medium	6.5/10	WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55710	medium	4.3/10	WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55711	medium	6.5/10	WordPress WP Table Builder Plugin <= 2.0.12 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55712	medium	6.5/10	WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55713	medium	5.9/10	WordPress Blocksy Theme <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55714	medium	6.5/10	WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55716	medium	4.3/10	WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability	Aug 14, 2025 1y ago
CVE-2024-37945	medium	6.5/10	WordPress WPBITS Addons For Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability	Aug 14, 2025 1y ago
CVE-2025-54707	critical	9.3/10	WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54706	medium	6.5/10	WordPress Magical Posts Display Plugin plugin <= 1.2.52 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54705	medium	4.3/10	WordPress WpEvently plugin <= 4.4.6 - Broken Access Control vulnerability	Aug 14, 2025 1y ago
CVE-2025-54704	medium	6.5/10	WordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54703	medium	4.3/10	WordPress Integrate Google Drive plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) vulnerability	Aug 14, 2025 1y ago
CVE-2025-54702	medium	4.3/10	WordPress Ebook Store Plugin plugin <= 5.8013 - Cross Site Request Forgery (CSRF) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54701	high	8.1/10	WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54700	high	8.1/10	WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54699	medium	6.5/10	WordPress Masteriyo - LMS Plugin plugin <= 1.18.3 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54698	medium	5.4/10	WordPress Classified Listing Plugin plugin <= 5.0.0 - Content Injection Vulnerability	Aug 14, 2025 1y ago
CVE-2025-54697	high	7.2/10	WordPress Kadence WooCommerce Email Designer Plugin <= 1.5.16 - Privilege Escalation Vulnerability	Aug 14, 2025 1y ago