Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,981

All time

Critical · Active

12,268

CVSS ≥ 9.0

New · 14 days

2,361

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 10891–10920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-39920	high	7.5/10	WordPress Redirection for Contact Form 7 plugin <= 2.9.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-39305	medium	5.3/10	WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38514	medium	4.3/10	WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38483	medium	5.4/10	WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38480	medium	5.3/10	WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38479	medium	5.3/10	WordPress Simple Googlebot Visit plugin <= 1.2.4 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38477	medium	4.3/10	WordPress QR code MeCard/vCard generator plugin <= 1.6.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38475	medium	4.3/10	WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38385	high	8.3/10	WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-38383	medium	5.4/10	WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37989	medium	5.4/10	WordPress Easyship WooCommerce Shipping Rates plugin <= 0.9.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37987	medium	6.5/10	WordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37984	medium	4.3/10	WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37971	medium	6.5/10	WordPress WooCommerce Product Stock Alert plugin <= 2.0.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37969	medium	5.3/10	WordPress Checkout with Zelle on Woocommerce plugin <= 3.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-37967	medium	6.5/10	WordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control Vulnerability	Dec 13, 2024 1y ago
CVE-2023-37887	medium	6.5/10	WordPress WPSchoolPress plugin <= 2.2.7 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36681	medium	5.3/10	WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36680	medium	5.4/10	WordPress Image Regenerate & Select Crop plugin <= 7.1.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36531	medium	4.3/10	WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36528	medium	5.3/10	WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability	Dec 13, 2024 1y ago
CVE-2023-36526	medium	5.4/10	WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36519	medium	5.4/10	WordPress SW Product Bundles plugin <= 2.0.15 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36518	medium	4.3/10	WordPress Post Hit Counter plugin <= 1.3.2 - Broken Access Control	Dec 13, 2024 1y ago
CVE-2023-36510	high	7.3/10	WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36509	medium	5.4/10	WordPress CHP Ads Block Detector plugin <= 3.9.5 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-36506	medium	5.3/10	WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35875	medium	5.3/10	WordPress Gutenverse – Gutenberg Blocks – Page Builder for Site Editor plugin <= 1.8.5 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35777	medium	5.3/10	WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability	Dec 13, 2024 1y ago
CVE-2023-35052	medium	4.3/10	WordPress Directorist plugin <= 7.5.4 - Arbitrary Content Deletion vulnerability	Dec 13, 2024 1y ago