Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,414

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,144

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 11851–11880 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-49233	medium	6.5/10	WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49234	medium	6.5/10	WordPress Plexx Elementor Extension plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49236	medium	6.5/10	WordPress Crazy Call To Action Box plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49238	high	7.1/10	WordPress ADIF Log Search Widget plugin <= 1.0f - Reflected Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49239	high	7.1/10	WordPress Add Categories Post Footer plugin <= 2.2.2 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49240	high	7.1/10	WordPress AB Categories Search Widget plugin <= 0.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49241	medium	6.5/10	WordPress Tito plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49243	high	7.5/10	WordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability	Oct 18, 2024 1y ago
CVE-2024-9364	medium	4.3/10	SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion	Oct 18, 2024 1y ago
CVE-2024-49248	high	7.1/10	WordPress Ad Inserter plugin <= 2.7.37 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49255	medium	6.5/10	WordPress Da Reactions plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49259	medium	6.5/10	WordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49261	medium	6.5/10	WordPress Arkhe Blocks plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49262	medium	6.5/10	WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49263	medium	6.5/10	WordPress My Favorites plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49264	medium	6.5/10	WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49276	high	7.1/10	WordPress Clio Grow plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49277	medium	6.5/10	WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49278	medium	6.5/10	WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49279	medium	6.5/10	WordPress Hyperlink Group Block plugin <= 1.17.5 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49280	medium	6.5/10	WordPress Lightbox slider -- Responsive Lightbox Gallery plugin <= 1.10.6 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49281	medium	6.5/10	WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49282	medium	5.9/10	WordPress Responsive Lightbox & Gallery plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49283	high	7.1/10	WordPress CURCY plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49288	medium	5.9/10	WordPress Email Template Customizer for WooCommerce plugin <= 1.2.9.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49289	medium	6.5/10	WordPress Cooked Pro plugin < 1.8.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49292	medium	6.5/10	WordPress Exclusive Addons for Elementor plugin <= 2.7.1 - Cross-Site Scripting vulnerability	Oct 17, 2024 1y ago
CVE-2024-49295	medium	5.9/10	WordPress Simple Testimonials Showcase plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49296	medium	6.5/10	WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49298	medium	6.5/10	WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago