Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

340,705

All time

Critical · Active

11,011

CVSS ≥ 9.0

New · 14 days

2,944

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 9931–9960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-46206	medium	5.3/10	WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46203	medium	4.3/10	WordPress Just Custom Fields plugin <= 3.3.2 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46196	medium	4.3/10	WordPress Social proof testimonials and reviews by Repuso plugin <= 4.97 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46195	medium	6.5/10	WordPress Headline Analyzer plugin <= 1.3.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46188	medium	4.3/10	WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46083	medium	5.3/10	WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46082	medium	5.3/10	WordPress Broken Link Checker \| Finder plugin <= 2.4.2 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46080	medium	4.3/10	WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-46079	medium	5.4/10	WordPress Ashe Extra plugin <= 1.2.9 - Broken Access Control + CSRF vulnerability	Jan 2, 2025 1y ago
CVE-2023-46073	medium	5.3/10	WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF	Jan 2, 2025 1y ago
CVE-2023-45828	medium	5.4/10	WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45766	medium	5.3/10	WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45765	medium	4.3/10	WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45760	medium	4.3/10	WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45649	medium	5.3/10	WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45636	medium	5.4/10	WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45631	medium	4.3/10	WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45275	medium	6.5/10	WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45271	medium	4.3/10	WordPress ProductX – Gutenberg WooCommerce Blocks plugin <= 2.7.8 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45110	medium	4.3/10	WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45104	high	7.3/10	WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45101	medium	4.3/10	WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45061	medium	5.3/10	WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45045	medium	5.4/10	WordPress WP Custom Widget area plugin <= 1.2.5 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-45002	medium	4.3/10	WordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-44988	medium	4.3/10	WordPress WP Custom Admin Interface plugin <= 7.32 - Broken Access Control vulnerability	Jan 2, 2025 1y ago
CVE-2023-44258	medium	5.3/10	WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability	Jan 2, 2025 1y ago
CVE-2024-56027	high	7.1/10	WordPress Leads CRM plugin <= 2.0.13 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 2, 2025 1y ago
CVE-2024-56028	high	7.1/10	WordPress Lemonade Social Networks Autoposter Pinterest plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 2, 2025 1y ago
CVE-2024-56029	high	7.1/10	WordPress Easy Language Switcher plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 2, 2025 1y ago