Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,412

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,149

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 11551–11580 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43159	medium	5.3/10	WordPress Masteriyo LMS plugin <= 1.11.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43209	medium	6.5/10	WordPress Bitly's WordPress Plugin plugin <= 2.7.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43208	medium	4.3/10	WordPress Send Emails with Mandrill plugin <= 1.4.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43211	medium	5.9/10	WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability	Nov 1, 2024 1y ago
CVE-2024-43215	medium	4.3/10	WordPress Social Slider Feed plugin <= 2.2.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43212	high	7.5/10	WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43223	medium	4.3/10	WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43219	medium	5.3/10	WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43229	medium	4.3/10	WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43253	medium	5.3/10	WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43235	high	7.1/10	WordPress Meta Box plugin <= 5.9.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43260	medium	5.4/10	WordPress Clearfy Cache plugin <= 2.2.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43254	medium	4.3/10	WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43268	medium	5.4/10	WordPress Backup and Restore WordPress plugin <= 1.50 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43273	medium	5.4/10	WordPress Icegram Collect plugin <= 1.3.14 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43270	medium	5.3/10	WordPress Backup and Restore WordPress plugin <= 1.50 - Unauthenticated Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43277	medium	5.3/10	WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43274	medium	5.8/10	WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43285	medium	6.3/10	WordPress Presto Player plugin <= 3.0.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43293	medium	4.3/10	WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43290	medium	5.3/10	WordPress Atarim plugin <= 4.0.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43296	medium	4.3/10	WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43298	medium	4.3/10	WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43297	medium	4.3/10	WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43302	medium	4.3/10	WordPress Fonts plugin <= 3.7.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43312	medium	5.4/10	WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43310	medium	6.5/10	WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43314	medium	4.3/10	WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43332	medium	4.3/10	WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43323	medium	5.3/10	WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability	Nov 1, 2024 1y ago