Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,009

All time

Critical · Active

12,268

CVSS ≥ 9.0

New · 14 days

2,324

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11521–11550 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-51892	medium	6.5/10	WordPress Sell Media File with Stripe plugin <= 1.0.6 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51894	medium	6.5/10	WordPress Topbar ID for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51896	medium	6.5/10	WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51895	medium	6.5/10	WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51898	medium	6.5/10	WordPress Semantic Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51897	medium	6.5/10	WordPress News Articles plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51899	medium	6.5/10	WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51902	medium	6.5/10	WordPress TinyCode plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51901	medium	6.5/10	WordPress Smooth Maps plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51904	medium	6.5/10	WordPress Embed documents shortcode plugin <= 1.5 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51903	medium	6.5/10	WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51906	medium	6.5/10	WordPress RSV 360 View plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51905	medium	6.5/10	WordPress RSV PDF Preview plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51907	medium	6.5/10	WordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51909	medium	6.5/10	WordPress audioCase plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51908	medium	6.5/10	WordPress Adventure Bucket List plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51911	medium	6.5/10	WordPress Featured product by category name plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51910	medium	6.5/10	WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51912	medium	6.5/10	WordPress IntelliWidget Elements plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51914	medium	6.5/10	WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51913	medium	6.5/10	WordPress Mapme plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51917	medium	6.5/10	WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51916	medium	6.5/10	WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51920	medium	6.5/10	WordPress Map Store Locator plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51918	medium	6.5/10	WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51922	medium	6.5/10	WordPress VP Sitemap plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51921	medium	6.5/10	WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51924	medium	6.5/10	WordPress WP Agenda plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51923	medium	6.5/10	WordPress Websand Subscription Form plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51926	medium	6.5/10	WordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago