Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,412

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,149

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11581–11610 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43343	medium	4.3/10	WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43341	medium	6.5/10	WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43355	medium	4.3/10	WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43923	medium	5.3/10	WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43919	medium	5.3/10	WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43928	medium	5.4/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43925	medium	4.3/10	WordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43932	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43929	medium	6.5/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43937	medium	6.4/10	WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability	Nov 1, 2024 1y ago
CVE-2024-43962	medium	5.4/10	WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43956	medium	6.5/10	WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43968	medium	4.3/10	WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43974	medium	6.5/10	WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43973	medium	4.3/10	WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43980	medium	6.5/10	WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43979	medium	6.5/10	WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43981	medium	4.3/10	WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43998	medium	6.5/10	WordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43982	high	8.8/10	WordPress Login As Users plugin <= 1.4.3 - Broken Access Control to Account Takeover vulnerability	Nov 1, 2024 1y ago
CVE-2024-44006	medium	4.3/10	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44020	medium	4.3/10	WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44019	medium	5.3/10	WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerability	Nov 1, 2024 1y ago
CVE-2024-44031	medium	4.3/10	WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44021	medium	5.4/10	WordPress Truepush plugin <= 1.0.8 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44052	medium	4.3/10	WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47317	medium	4.3/10	WordPress Ads by WPQuads plugin <= 2.0.84 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47308	medium	6.5/10	WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47318	medium	4.3/10	WordPress PWA for WP & AMP plugin <= 1.7.72 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47358	medium	5.3/10	WordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago