Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,059

All time

Critical · Active

11,052

CVSS ≥ 9.0

New · 14 days

3,021

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 10681–10710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-30479	medium	5.3/10	WordPress Stamped.io Product Reviews & UGC for WooCommerce plugin <= 2.3.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30476	medium	4.3/10	WordPress Blogger Buzz theme <= 1.2.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30486	medium	4.3/10	WordPress Square theme <= 2.0.0 - Broken Access Control	Dec 9, 2024 1y ago
CVE-2023-30488	medium	5.3/10	WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-30748	medium	4.3/10	WordPress Easy Appointments plugin <= 3.10.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability	Dec 9, 2024 1y ago
CVE-2023-30870	medium	6.5/10	WordPress Sharkdropship for AliExpress Dropship and Affiliate plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities	Dec 9, 2024 1y ago
CVE-2023-30783	medium	4.3/10	WordPress Smart WooCommerce Search plugin <= 2.5.0 - Broken Access Control	Dec 9, 2024 1y ago
CVE-2023-30873	medium	5.4/10	WordPress WP Docs plugin <= 1.9.8 - Broken Access Control	Dec 9, 2024 1y ago
CVE-2023-31073	medium	4.3/10	WordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-31214	medium	5.4/10	WordPress WP Quick Post Duplicator plugin <= 2.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32094	medium	5.4/10	WordPress Extended Post Status plugin <= 1.0.19 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32117	critical	9.8/10	WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32293	medium	5.3/10	WordPress WRC Pricing Tables plugin <= 2.3.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32126	medium	4.3/10	WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-32299	medium	6.5/10	WordPress Ni WooCommerce Sales Report plugin <= 3.7.3 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47694	medium	5.4/10	WordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47698	high	8.6/10	WordPress Japanized For WooCommerce plugin <= 2.6.4 - Multiple Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47756	medium	4.3/10	WordPress Welcome Email Editor plugin <= 5.0.6 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47760	medium	4.3/10	WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47761	medium	4.3/10	WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47763	medium	4.3/10	WordPress WP Custom Admin Interface plugin <= 7.31 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47762	medium	4.3/10	WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47764	medium	6.5/10	WordPress Ditty plugin <= 3.1.24 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47776	medium	4.3/10	WordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47780	medium	4.3/10	WordPress EasyAzon – Amazon Associates Affiliate Plugin plugin <= 5.1.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47793	medium	4.3/10	WordPress Acme Fix Images plugin <= 1.0.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47805	medium	5.3/10	WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47820	medium	4.3/10	WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47822	medium	5.4/10	WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability	Dec 9, 2024 1y ago
CVE-2023-47823	medium	5.3/10	WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability	Dec 9, 2024 1y ago