Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,416

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,137

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12001–12030 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-44037	medium	5.9/10	WordPress Multipurpose Ticket Booking Manager plugin <= 4.2.2 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44039	medium	5.9/10	WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44040	medium	5.9/10	WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44041	medium	5.9/10	WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44042	medium	5.9/10	WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44043	medium	5.9/10	WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44045	medium	5.9/10	WordPress WP Abstracts plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-44046	medium	5.9/10	WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-45454	high	7.1/10	WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47297	high	7.1/10	WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47298	medium	6.5/10	WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47299	medium	5.9/10	WordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47300	high	7.1/10	WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47301	high	7.1/10	WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47306	high	7.1/10	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47307	medium	6.5/10	WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47310	medium	6.5/10	WordPress ARI Fancy Lightbox -- Popup for WordPress plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47313	medium	5.1/10	WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47320	high	7.1/10	WordPress WS Form LITE plugin <= 1.9.238 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47322	high	7.1/10	WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47326	high	7.1/10	WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47327	high	7.1/10	WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47329	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47332	medium	6.5/10	WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47333	high	7.1/10	WordPress Loops & Logic plugin <= 4.1.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47336	medium	5.9/10	WordPress Terms Descriptions plugin <= 3.4.7 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47339	high	7.1/10	WordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47340	medium	6.5/10	WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47341	high	7.1/10	WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47342	medium	6.5/10	WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago