Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,399

All time

Critical · Active

11,075

CVSS ≥ 9.0

New · 14 days

3,160

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11371–11400 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-51702	high	7.1/10	WordPress SrcSet Responsive Images for WordPress plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51703	high	7.1/10	WordPress WP-Basics plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51704	high	7.1/10	WordPress imPress plugin <= 0.1.4 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51705	high	7.1/10	WordPress WP MMenu Lite plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51706	high	7.1/10	WordPress UW Freelancer plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51707	high	7.1/10	WordPress WP Visual Adverts plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51708	high	7.1/10	WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51709	high	7.1/10	WordPress TeleAdmin plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51710	high	7.1/10	WordPress Responsive Data Table plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51711	high	7.1/10	WordPress Saragna plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51712	high	7.1/10	WordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51713	high	7.1/10	WordPress HQ60 Fidelity Card plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51714	high	7.1/10	WordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51716	high	7.1/10	WordPress Twitter real time search scrolling plugin <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51717	high	7.1/10	WordPress Ajax Content Filter plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51718	high	7.1/10	WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51719	high	7.1/10	WordPress Simplistic SEO plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51759	high	7.1/10	WordPress SVT Simple plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51760	high	7.1/10	WordPress Dashing Memberships plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51761	high	7.1/10	WordPress WPHelpful plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51762	high	7.1/10	WordPress PropertyShift plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51763	high	7.1/10	WordPress Team Showcase and Slider plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10676	high	7.1/10	WordPress Conversion Helper plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51776	high	7.1/10	WordPress Daily Image plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51778	high	7.1/10	WordPress Satisfaction Reports from Help Scout plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51779	high	7.1/10	WordPress Don't Break The Code plugin <= .3.1 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51780	high	7.1/10	WordPress eewee admin custom plugin <= 1.8.2.4 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51781	high	7.1/10	WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-50524	high	8.5/10	WordPress Administrator Z plugin < 2024.10.21 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-50539	high	8.5/10	WordPress Lodgix.com Vacation Rental Website Builder plugin <= 3.9.73 - SQL Injection vulnerability	Nov 9, 2024 1y ago