Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,419

All time

Critical · Active

11,077

CVSS ≥ 9.0

New · 14 days

3,105

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12331–12360 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43266	medium	5.4/10	WordPress WP Job Portal plugin <= 2.1.8 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43288	medium	4.3/10	WordPress wpForo Forum plugin <= 2.3.4 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43315	high	7.5/10	WordPress Stripe Payments For WooCommerce plugin <= 1.9.1 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43322	medium	5.4/10	WordPress Zephyr Project Manager plugin <= 3.3.100 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43350	medium	5.3/10	WordPress Propovoice CRM plugin <= 1.7.6.4 - Insecure Direct Object References (IDOR) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43241	high	7.1/10	WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43244	high	7.1/10	WordPress houzez Theme By FaveThemes <= 3.2.4 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43246	high	7.1/10	WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43262	medium	6.5/10	WordPress Busiprof theme <= 2.4.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43263	medium	6.5/10	WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43267	medium	6.5/10	WordPress Mega Addons For Elementor plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43278	medium	6.5/10	WordPress Meta Field Block plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43279	high	7.1/10	WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43284	medium	6.5/10	WordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43291	medium	5.9/10	WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43292	medium	5.9/10	WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43294	medium	6.5/10	WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43303	high	7.1/10	WordPress White Label CMS plugin <= 2.7.4 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43304	high	7.1/10	WordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43305	medium	6.5/10	WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43306	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43307	medium	6.5/10	WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43308	medium	6.5/10	WordPress Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43309	medium	6.5/10	WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43313	high	7.1/10	WordPress FormFacade plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43318	medium	6.5/10	WordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43320	medium	6.5/10	WordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43321	medium	6.5/10	WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43324	medium	5.9/10	WordPress Clever Addons for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago
CVE-2024-43327	high	7.1/10	WordPress Invite Anyone plugin <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 1y ago