Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,419

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,126

Newly disclosed

Feed last synced

6 hrs ago

Data freshness

Showing 12241–12270 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43954	medium	6.3/10	WordPress Droip plugin <= 1.1.1 - Subscriber+ Settings Change/Data Exposure Vulnerability	Aug 29, 2024 1y ago
CVE-2024-43944	low	3.7/10	WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability	Aug 29, 2024 1y ago
CVE-2024-43943	high	8.5/10	WordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43942	high	8.5/10	WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43941	critical	9.3/10	WordPress Propovoice Pro plugin <= 1.7.0.3 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43940	medium	6.5/10	WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Plugin Settings Change vulnerability	Aug 29, 2024 1y ago
CVE-2024-43939	medium	6.5/10	WordPress Z Y N I T H plugin <= 7.4.9 - Unauthenticated Arbitrary Option Deletion vulnerability	Aug 29, 2024 1y ago
CVE-2024-43931	critical	9.8/10	WordPress JobSearch WP Job Board WordPress Plugin plugin <= 2.5.3 - PHP Object Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43922	medium	4.8/10	WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability	Aug 29, 2024 1y ago
CVE-2024-43918	critical	10.0/10	WordPress WBW Product Table PRO plugin <= 1.9.4 - Unauthenticated Arbitrary SQL Query Execution vulnerability	Aug 29, 2024 1y ago
CVE-2024-43917	critical	9.3/10	WordPress TI WooCommerce Wishlist plugin <= 2.8.2 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43144	critical	9.3/10	WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43132	critical	9.3/10	WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39658	high	7.6/10	WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39653	critical	9.3/10	WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39638	high	8.5/10	WordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39622	critical	9.3/10	WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-39620	high	8.5/10	WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-38795	critical	9.3/10	WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-38793	high	8.5/10	WordPress Best Restaurant Menu by Pricelisto plugin <= 1.4.1 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-38693	high	7.6/10	WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-5057	critical	9.3/10	WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability	Aug 29, 2024 1y ago
CVE-2024-43986	medium	5.9/10	WordPress E-cab taxi booking manager plugin <=1.0.9 - Cross Site Scripting (XSS) vulnerability	Aug 29, 2024 1y ago
CVE-2024-39628	medium	5.4/10	WordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-39641	medium	4.3/10	WordPress LearnPress plugin <= 4.2.6.8.2 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-39645	medium	5.4/10	WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-39657	medium	4.3/10	WordPress Sender plugin <= 2.6.18 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-43116	medium	4.3/10	WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-43117	medium	4.3/10	WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability	Aug 26, 2024 1y ago
CVE-2024-43265	medium	4.3/10	WordPress Analytify plugin <= 5.3.1 - CSRF Leading to Optout Vulnerability	Aug 26, 2024 1y ago