Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

353,728

All time

Critical · Active

12,535

CVSS ≥ 9.0

New · 14 days

1,404

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 11971–12000 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43212	high	7.5/10	WordPress WpTravelly plugin <= 1.7.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43223	medium	4.3/10	WordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43219	medium	5.3/10	WordPress Persian WooCommerce plugin <= 7.1.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43229	medium	4.3/10	WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43253	medium	5.3/10	WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43235	high	7.1/10	WordPress Meta Box plugin <= 5.9.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43260	medium	5.4/10	WordPress Clearfy Cache plugin <= 2.2.4 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43254	medium	4.3/10	WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43268	medium	5.4/10	WordPress Backup and Restore WordPress plugin <= 1.50 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43273	medium	5.4/10	WordPress Icegram Collect plugin <= 1.3.14 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43270	medium	5.3/10	WordPress Backup and Restore WordPress plugin <= 1.50 - Unauthenticated Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43277	medium	5.3/10	WordPress UsersWP plugin <= 1.2.15 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43274	medium	5.8/10	WordPress JS Help Desk – The Ultimate Help Desk plugin <= 2.8.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43285	medium	6.3/10	WordPress Presto Player plugin <= 3.0.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43293	medium	4.3/10	WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43290	medium	5.3/10	WordPress Atarim plugin <= 4.0.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43296	medium	4.3/10	WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43298	medium	4.3/10	WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43297	medium	4.3/10	WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43302	medium	4.3/10	WordPress Fonts plugin <= 3.7.7 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43312	medium	5.4/10	WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43310	medium	6.5/10	WordPress Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin <= 3.4.9 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43314	medium	4.3/10	WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.9.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43332	medium	4.3/10	WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43323	medium	5.3/10	WordPress ReviewX plugin <= 1.6.28 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43343	medium	4.3/10	WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43341	medium	6.5/10	WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43355	medium	4.3/10	WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43923	medium	5.3/10	WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43919	medium	5.3/10	WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.10 - Broken Access Control vulnerability	Nov 1, 2024 1y ago