Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,014

All time

Critical · Active

12,268

CVSS ≥ 9.0

New · 14 days

2,247

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 11971–12000 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43932	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43929	medium	6.5/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43937	medium	6.4/10	WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability	Nov 1, 2024 1y ago
CVE-2024-43962	medium	5.4/10	WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43956	medium	6.5/10	WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43968	medium	4.3/10	WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43974	medium	6.5/10	WordPress ReviveNews theme <= 1.0.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43973	medium	4.3/10	WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43980	medium	6.5/10	WordPress FotaWP theme <= 1.4.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43979	medium	6.5/10	WordPress Blockbooster theme <= 1.0.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43981	medium	4.3/10	WordPress GeoDirectory plugin <= 2.3.70 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43998	medium	6.5/10	WordPress Blogpoet theme <= 1.0.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43982	high	8.8/10	WordPress Login As Users plugin <= 1.4.3 - Broken Access Control to Account Takeover vulnerability	Nov 1, 2024 1y ago
CVE-2024-44006	medium	4.3/10	WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.3.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44020	medium	4.3/10	WordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44019	medium	5.3/10	WordPress Contact Form 7 Campaign Monitor Extension plugin <= 0.4.67 - Arbitrary File Deletion vulnerability	Nov 1, 2024 1y ago
CVE-2024-44031	medium	4.3/10	WordPress JoomSport plugin <= 5.6.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44021	medium	5.4/10	WordPress Truepush plugin <= 1.0.8 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-44052	medium	4.3/10	WordPress HelloAsso plugin <= 1.1.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47317	medium	4.3/10	WordPress Ads by WPQuads plugin <= 2.0.84 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47308	medium	6.5/10	WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47318	medium	4.3/10	WordPress PWA for WP & AMP plugin <= 1.7.72 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47358	medium	5.3/10	WordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47321	medium	6.5/10	WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47359	medium	5.3/10	WordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47361	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47362	medium	4.3/10	WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37094	high	8.2/10	WordPress MasterStudy LMS plugin <= 3.2.12 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43930	medium	4.3/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - Broken Access Control vulnerability	Oct 31, 2024 1y ago
CVE-2024-43933	high	7.1/10	WordPress WPMobile.App plugin <= 11.48 - CSRF to Stored XSS vulnerability	Oct 31, 2024 1y ago