Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,020

All time

Critical · Active

12,271

CVSS ≥ 9.0

New · 14 days

2,209

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12421–12450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-47355	medium	6.5/10	WordPress Cozy Blocks plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47356	medium	5.1/10	WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47357	medium	6.5/10	WordPress Happy Addons for Elementor plugin <= 3.12.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47360	high	7.1/10	WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47363	medium	6.5/10	WordPress Blockspare plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47364	medium	6.5/10	WordPress Move Addons for Elementor plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47365	medium	6.5/10	WordPress Automatically Hierarchic Categories in Menu plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47366	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47367	high	7.1/10	WordPress YITH WooCommerce Product Add-Ons plugin <= 4.13.0 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47368	medium	6.5/10	WordPress Premium Blocks plugin <= 2.1.33 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 1y ago
CVE-2024-47369	high	7.1/10	WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47370	medium	6.5/10	WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47371	medium	5.9/10	WordPress WP MyLinks plugin<= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47372	medium	5.9/10	WordPress TNC PDF viewer plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47373	medium	6.5/10	WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47374	high	7.1/10	WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47375	medium	6.5/10	WordPress XLTab – Accordions and Tabs for Elementor Page Builder plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47376	medium	5.9/10	WordPress Slideshow Gallery LITE plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47377	medium	5.9/10	WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47378	high	7.1/10	WordPress WPCOM Member plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47379	high	7.1/10	WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47380	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.6.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47381	medium	5.9/10	WordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47382	medium	6.5/10	WordPress Page-list plugin <= 5.6 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47383	medium	5.9/10	WordPress The Pack Elementor addons plugin 2.0.8.8 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47384	high	7.1/10	WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47385	medium	6.5/10	WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47386	high	7.1/10	WordPress WP Extended plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47387	medium	5.9/10	WordPress Search Atlas SEO plugin <= 1.8.2 - Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago
CVE-2024-47388	high	7.1/10	WordPress SliceWP Affiliates plugin <= 1.1.18 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 5, 2024 1y ago