Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

340,899

All time

Critical · Active

11,029

CVSS ≥ 9.0

New · 14 days

3,057

Newly disclosed

Feed last synced

49 mins ago

Data freshness

Showing 10261–10290 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-54375	high	7.5/10	WordPress Woolook plugin <= 1.7.0 - Local File Inclusion vulnerability	Dec 16, 2024 1y ago
CVE-2024-54380	high	7.5/10	WordPress WP Cookies Enabler plugin <= 1.0.1 - Local File Inclusion vulnerability	Dec 16, 2024 1y ago
CVE-2024-54379	high	8.8/10	WordPress Minterpress plugin <= 1.0.5 - Arbitrary Option Update to Privilege Escalation vulnerability	Dec 16, 2024 1y ago
CVE-2024-54385	high	7.2/10	WordPress Radio Player plugin <= 2.0.83 - Server Side Request Forgery (SSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54382	medium	4.9/10	WordPress Bold Page Builder plugin <= 5.1.5 - Path Traversal vulnerability	Dec 16, 2024 1y ago
CVE-2024-54387	high	7.1/10	WordPress Posts Date Ranges plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54395	high	7.1/10	WordPress Increase Sociability plugin <= 1.3.0 - Reflected Cross Site Request Forgery (CSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54390	high	7.1/10	WordPress TagGator plugin <= 1.54 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54406	high	7.1/10	WordPress Comments On Feed plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54403	high	7.1/10	WordPress Visual Recent Posts plugin <= 1.2.3 - Reflected Cross Site Request Forgery (CSRF) vulnerability	Dec 16, 2024 1y ago
CVE-2024-54422	high	7.1/10	WordPress Evernote Sync plugin <= 3.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 16, 2024 1y ago
CVE-2024-55973	high	8.5/10	WordPress TSB Occasion Editor plugin <= 1.2.1 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55972	critical	9.3/10	WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55974	high	8.5/10	WordPress Mimoos plugin <= 1.2 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55977	critical	9.3/10	WordPress LaunchPage.app Importer plugin <= 1.1 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55976	critical	9.3/10	WordPress Critical Site Intel plugin <= 1.0 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55978	critical	9.3/10	WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55980	critical	9.3/10	WordPress Wr Age Verification plugin <= 2.0.0 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55979	high	8.5/10	WordPress Wr Age Verification plugin <= 2.0.0 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55982	critical	9.3/10	WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55981	critical	9.3/10	WordPress Nabz Image Gallery plugin <= v1.00 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55986	high	8.5/10	WordPress Service plugin <= 1.0.4 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55988	critical	9.3/10	WordPress Navayan CSV Export Plugin <= 1.0.9 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55987	high	8.5/10	WordPress Advanced What should we write next about plugin <= 1.0.3 - SQL Injection vulnerability	Dec 16, 2024 1y ago
CVE-2024-55996	medium	6.1/10	WordPress Payment gateway per Product for WooCommerce plugin <= 3.5.6 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-56013	high	8.8/10	WordPress Wovax IDX plugin <= 1.2.2 - Account Takeover vulnerability	Dec 16, 2024 1y ago
CVE-2024-54384	medium	4.3/10	WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.8.3 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-55992	medium	5.4/10	WordPress WooCommerce Basic Ordernumbers plugin <= 1.4.4 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-54417	medium	5.3/10	WordPress PixProof plugin <= 2.0.1 - Broken Access Control vulnerability	Dec 16, 2024 1y ago
CVE-2024-55993	medium	5.3/10	WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerability	Dec 16, 2024 1y ago