Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,020

All time

Critical · Active

12,271

CVSS ≥ 9.0

New · 14 days

2,209

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12391–12420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-44046	medium	5.9/10	WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-45454	high	7.1/10	WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47297	high	7.1/10	WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47298	medium	6.5/10	WordPress Bold Page Builder plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47299	medium	5.9/10	WordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47300	high	7.1/10	WordPress CubeWP Forms plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47301	high	7.1/10	WordPress Bit Form plugin <= 2.13.10 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47306	high	7.1/10	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47307	medium	6.5/10	WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47310	medium	6.5/10	WordPress ARI Fancy Lightbox -- Popup for WordPress plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47313	medium	5.1/10	WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47320	high	7.1/10	WordPress WS Form LITE plugin <= 1.9.238 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47322	high	7.1/10	WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47326	high	7.1/10	WordPress Share This Image plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47327	high	7.1/10	WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47329	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47332	medium	6.5/10	WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47333	high	7.1/10	WordPress Loops & Logic plugin <= 4.1.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47336	medium	5.9/10	WordPress Terms Descriptions plugin <= 3.4.7 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47339	high	7.1/10	WordPress WP Mail Catcher plugin <= 2.1.9 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47340	medium	6.5/10	WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47341	high	7.1/10	WordPress WP-DownloadManager plugin <= 1.68.8 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47342	medium	6.5/10	WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47343	medium	6.5/10	WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47345	medium	5.9/10	WordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47346	high	7.1/10	WordPress Newsletters plugin <= 4.9.9.1 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47347	high	7.1/10	WordPress Chartify plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47348	high	7.1/10	WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47349	high	7.1/10	WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47352	high	7.1/10	WordPress WP Bulk Delete plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago