Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,412

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,150

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 11521–11550 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-38743	medium	5.3/10	WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38745	medium	5.3/10	WordPress Wholesale Suite plugin <= 2.1.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38769	medium	5.3/10	WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38748	medium	5.3/10	WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38771	medium	6.5/10	WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38777	medium	6.5/10	WordPress Titan Anti-spam & Security plugin <= 7.3.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38774	medium	5.4/10	WordPress Security Optimizer plugin <= 1.5.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38792	medium	5.3/10	WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability	Nov 1, 2024 1y ago
CVE-2024-38783	medium	5.3/10	WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-38794	medium	5.3/10	WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39635	medium	5.4/10	WordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39625	medium	5.3/10	WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability	Nov 1, 2024 1y ago
CVE-2024-39640	medium	6.5/10	WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-39639	medium	4.3/10	WordPress File Upload plugin <= 4.24.7 - Broken Access Control + CSRF vulnerability	Nov 1, 2024 1y ago
CVE-2024-39650	high	7.3/10	WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities	Nov 1, 2024 1y ago
CVE-2024-39664	high	7.3/10	WordPress Filter & Grids plugin <= 2.8.32 - Broken Authentication vulnerability	Nov 1, 2024 1y ago
CVE-2024-39654	medium	5.3/10	WordPress Sign-up Sheets plugin <= 2.2.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43118	medium	4.3/10	WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43120	medium	5.3/10	WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43119	medium	4.3/10	WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43122	medium	6.5/10	WordPress Robin image optimizer plugin <= 1.6.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43136	medium	4.3/10	WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43134	medium	4.3/10	WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43142	medium	4.3/10	WordPress Tutor LMS plugin <= 2.7.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43146	medium	6.3/10	WordPress Accelerated Mobile Pages plugin <= 1.0.96.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43143	medium	6.4/10	WordPress Registrations for the Events Calendar plugin <= 2.12.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43157	medium	4.3/10	WordPress FormCraft plugin <= 1.2.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43154	medium	4.3/10	WordPress Advanced Cron Manager – debug & control plugin <= 2.5.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43158	high	7.5/10	WordPress Masteriyo LMS plugin <= 1.11.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43162	medium	4.3/10	WordPress Easy Digital Downloads plugin <= 3.2.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago