Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,014

All time

Critical · Active

12,268

CVSS ≥ 9.0

New · 14 days

2,279

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 11761–11790 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-51710	high	7.1/10	WordPress Responsive Data Table plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51711	high	7.1/10	WordPress Saragna plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51712	high	7.1/10	WordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51713	high	7.1/10	WordPress HQ60 Fidelity Card plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51714	high	7.1/10	WordPress User Password Reset plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51716	high	7.1/10	WordPress Twitter real time search scrolling plugin <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51717	high	7.1/10	WordPress Ajax Content Filter plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51718	high	7.1/10	WordPress Simple Modal plugin <= 0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51719	high	7.1/10	WordPress Simplistic SEO plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51759	high	7.1/10	WordPress SVT Simple plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51760	high	7.1/10	WordPress Dashing Memberships plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51761	high	7.1/10	WordPress WPHelpful plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51762	high	7.1/10	WordPress PropertyShift plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51763	high	7.1/10	WordPress Team Showcase and Slider plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10676	high	7.1/10	WordPress Conversion Helper plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51776	high	7.1/10	WordPress Daily Image plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51778	high	7.1/10	WordPress Satisfaction Reports from Help Scout plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51779	high	7.1/10	WordPress Don't Break The Code plugin <= .3.1 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51780	high	7.1/10	WordPress eewee admin custom plugin <= 1.8.2.4 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51781	high	7.1/10	WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-50524	high	8.5/10	WordPress Administrator Z plugin < 2024.10.21 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-50539	high	8.5/10	WordPress Lodgix.com Vacation Rental Website Builder plugin <= 3.9.73 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-50544	high	8.5/10	WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-51570	high	8.5/10	WordPress Easy Gallery plugin <= 1.4 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-51579	high	8.5/10	WordPress 5 Stars Rating Funnel plugin <=1.4.01 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-51601	high	8.5/10	WordPress Website price calculator plugin <= 4.1 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-51602	high	8.5/10	WordPress Simple Job Manager plugin <= 1.1 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-51607	high	8.5/10	WordPress Golf Tracker plugin <= 0.7 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-51619	high	8.5/10	WordPress Market 360 Viewer plugin <= 1.01 - SQL Injection vulnerability	Nov 9, 2024 1y ago
CVE-2024-51620	high	8.5/10	WordPress Porsline plugin <= 1.0.2 - SQL Injection vulnerability	Nov 9, 2024 1y ago