Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,374

All time

Critical · Active

11,069

CVSS ≥ 9.0

New · 14 days

3,211

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11131–11160 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-51885	medium	6.5/10	WordPress Browsing History plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51884	medium	6.5/10	WordPress Posts Search plugin <= 1.2.2 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51887	medium	6.5/10	WordPress NV Slider plugin <= 1.6 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51886	medium	6.5/10	WordPress Posts Filter plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51889	medium	6.5/10	WordPress Fancy User List plugin <= 3.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51891	medium	6.5/10	WordPress Official SalesWizard CRM Plugin plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51890	medium	6.5/10	WordPress Geoportail Shortcode plugin <= 2.4.4 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51893	medium	6.5/10	WordPress Postify: Post Layout For Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51892	medium	6.5/10	WordPress Sell Media File with Stripe plugin <= 1.0.6 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51894	medium	6.5/10	WordPress Topbar ID for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51896	medium	6.5/10	WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51895	medium	6.5/10	WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51898	medium	6.5/10	WordPress Semantic Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51897	medium	6.5/10	WordPress News Articles plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51899	medium	6.5/10	WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51902	medium	6.5/10	WordPress TinyCode plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51901	medium	6.5/10	WordPress Smooth Maps plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51904	medium	6.5/10	WordPress Embed documents shortcode plugin <= 1.5 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51903	medium	6.5/10	WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51906	medium	6.5/10	WordPress RSV 360 View plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51905	medium	6.5/10	WordPress RSV PDF Preview plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51907	medium	6.5/10	WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51909	medium	6.5/10	WordPress audioCase plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51908	medium	6.5/10	WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51911	medium	6.5/10	WordPress Featured product by category name plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51910	medium	6.5/10	WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51912	medium	6.5/10	WordPress IntelliWidget Elements plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51914	medium	6.5/10	WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51913	medium	6.5/10	WordPress Mapme plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51917	medium	6.5/10	WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago