Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,035

All time

Critical · Active

11,045

CVSS ≥ 9.0

New · 14 days

3,067

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 10501–10530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-40203	medium	4.3/10	WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control	Dec 13, 2024 1y ago
CVE-2023-40011	medium	5.4/10	WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-40005	medium	5.3/10	WordPress Easy Digital Downloads plugin <= 3.1.5 - Broken Access Control	Dec 13, 2024 1y ago
CVE-2023-40003	medium	6.5/10	WordPress WP Project Manager plugin <= 2.6.7 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-40001	medium	4.3/10	WordPress iThemes Sync plugin <= 2.1.13 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-39997	medium	5.3/10	WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability	Dec 13, 2024 1y ago
CVE-2023-39996	medium	5.3/10	WordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access Control	Dec 13, 2024 1y ago
CVE-2023-39995	medium	4.3/10	WordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-39920	high	7.5/10	WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-39305	medium	5.3/10	WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38514	medium	4.3/10	WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38483	medium	5.4/10	WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38480	medium	5.3/10	WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38479	medium	5.3/10	WordPress Simple Googlebot Visit plugin <= 1.2.4 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38477	medium	4.3/10	WordPress QR code MeCard/vCard generator plugin <= 1.6.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38475	medium	4.3/10	WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38385	high	8.3/10	WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38383	medium	5.4/10	WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37989	medium	5.4/10	WordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37987	medium	6.5/10	WordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37984	medium	4.3/10	WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37971	medium	6.5/10	WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37969	medium	5.3/10	WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37967	medium	6.5/10	WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability	Dec 13, 2024 1y ago
CVE-2023-37887	medium	6.5/10	WordPress WPSchoolPress plugin <= 2.2.7 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36681	medium	5.3/10	WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36680	medium	5.4/10	WordPress Image Regenerate & Select Crop plugin <= 7.1.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36531	medium	4.3/10	WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36528	medium	5.3/10	WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability	Dec 13, 2024 1y ago
CVE-2023-36526	medium	5.4/10	WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago