Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,416

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,134

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12031–12060 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-47343	medium	6.5/10	WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47345	medium	5.9/10	WordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47346	high	7.1/10	WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47347	high	7.1/10	WordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47348	high	7.1/10	WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47349	high	7.1/10	WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47352	high	7.1/10	WordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47355	medium	6.5/10	WordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47356	medium	5.1/10	WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47357	medium	6.5/10	WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47360	high	7.1/10	WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47363	medium	6.5/10	WordPress Blockspare plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47364	medium	6.5/10	WordPress Move Addons for Elementor plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47365	medium	6.5/10	WordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47366	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47367	high	7.1/10	WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47368	medium	6.5/10	WordPress Premium Blocks plugin <= 2.1.33 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47369	high	7.1/10	WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47370	medium	6.5/10	WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47371	medium	5.9/10	WordPress WP MyLinks plugin<= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47372	medium	5.9/10	WordPress TNC PDF viewer plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47373	medium	6.5/10	WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47374	high	7.1/10	WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47375	medium	6.5/10	WordPress XLTab – Accordions and Tabs for Elementor Page Builder plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47376	medium	5.9/10	WordPress Slideshow Gallery LITE plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47377	medium	5.9/10	WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47378	high	7.1/10	WordPress WPCOM Member plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47379	high	7.1/10	WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47380	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.6.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47381	medium	5.9/10	WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago