Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

340,702

All time

Critical · Active

11,011

CVSS ≥ 9.0

New · 14 days

2,988

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 9871–9900 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37467	medium	4.3/10	WordPress Hestia theme <= 3.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37458	medium	4.3/10	WordPress Highlight theme <= 1.0.29 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37451	medium	4.3/10	WordPress Travel Agency theme <= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37450	medium	4.3/10	WordPress Benevolent theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37448	medium	4.3/10	WordPress OnePress theme <= 2.3.6 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37441	medium	4.3/10	WordPress NewsMash theme <= 1.0.34 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37435	medium	4.3/10	WordPress Perfect Portfolio theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37431	medium	4.3/10	WordPress Mesmerize theme <= 1.6.120 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37426	medium	4.3/10	WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37421	medium	4.3/10	WordPress JobScout theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37417	medium	4.3/10	WordPress Coachify theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37413	medium	4.3/10	WordPress Preschool and Kindergarten theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37412	medium	4.3/10	WordPress Blossom Shop theme <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37274	medium	4.3/10	WordPress WP Mobile Menu plugin <= 2.8.4.3 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37272	medium	4.3/10	WordPress Travel Monster theme <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37243	medium	4.3/10	WordPress Vandana Lite theme <= 1.1.9 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37242	medium	4.3/10	WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37240	medium	4.3/10	WordPress Falang multilanguage for WordPress plugin <= 1.3.51 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37238	medium	4.3/10	WordPress WPAdverts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37236	medium	4.3/10	WordPress Loco Translate plugin <= 2.6.9 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37235	medium	4.3/10	WordPress Groundhogg plugin <= 3.4.2.3 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37104	medium	4.3/10	WordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37103	medium	4.3/10	WordPress Education Zone theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37102	medium	4.3/10	WordPress Vilva theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2024-37093	medium	4.3/10	WordPress MasterStudy LMS plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability	Jan 2, 2025 1y ago
CVE-2023-47693	high	7.5/10	WordPress Ultimate Addons for Contact Form 7 plugin <= 3.2.6 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-47692	medium	4.3/10	WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-47689	medium	6.5/10	WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability	Jan 2, 2025 1y ago
CVE-2023-47661	medium	5.4/10	WordPress Dragfy Addons for Elementor plugin <= 1.0.2 - Broken Access Control + CSRF vulnerability	Jan 2, 2025 1y ago
CVE-2023-47648	high	7.5/10	WordPress EazyDocs plugin <= 2.3.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago