Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,392

All time

Critical · Active

11,074

CVSS ≥ 9.0

New · 14 days

3,182

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11191–11220 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10388	high	7.2/10	WordPress GDPR <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting	Nov 19, 2024 1y ago
CVE-2024-11069	medium	6.5/10	WordPress GDPR <= 2.0.2 - Missing Authorization to Unauthenticated Arbitrary User Deletion	Nov 19, 2024 1y ago
CVE-2024-51939	medium	6.5/10	WordPress Stylish Internal Links plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-51940	medium	6.5/10	WordPress WP Responsive Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52339	medium	6.5/10	WordPress Mage Front End Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52340	medium	6.5/10	WordPress Photographer Connections plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52341	medium	6.5/10	WordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52342	medium	6.5/10	WordPress OS BXSlider plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52343	medium	6.5/10	WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52344	medium	6.5/10	WordPress Provide Forex Signals plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52345	medium	6.5/10	WordPress ra_qrcode plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52346	medium	6.5/10	WordPress SimpleGMaps plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52347	medium	6.5/10	WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera plugin <= 4.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52348	medium	6.5/10	WordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52349	medium	6.5/10	WordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52389	medium	6.5/10	WordPress WP Job Portal plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52390	medium	4.9/10	WordPress CYAN Backup plugin <= 2.5.3 - Arbitrary File Download vulnerability	Nov 18, 2024 1y ago
CVE-2024-52394	medium	6.5/10	WordPress Print PDF Generator and Publisher plugin <= 1.1.6 - Stored Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52417	high	7.1/10	WordPress ReConstruction theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52418	high	7.1/10	WordPress Gameplan theme <= 1.5.10 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52419	medium	6.5/10	WordPress Copy Anything to Clipboard plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52422	medium	6.5/10	WordPress WP Githuber MD plugin <= 1.16.3 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52423	medium	6.5/10	WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52424	high	7.1/10	WordPress wp-login customizer plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52425	medium	6.5/10	WordPress Drozd – Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52426	medium	6.5/10	WordPress Linear plugin <= 2.8.0 - Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-52431	critical	9.3/10	WordPress WP Video Robot plugin <= 1.20.0 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52435	high	7.6/10	WordPress Premium Packages – Sell Digital Products Securely plugin <= 6.0.5 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52436	high	7.6/10	WordPress Post SMTP plugin <= 2.9.9 - SQL Injection vulnerability	Nov 18, 2024 1y ago
CVE-2024-52428	high	8.1/10	WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability	Nov 18, 2024 1y ago