Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,561

All time

Critical · Active

11,102

CVSS ≥ 9.0

New · 14 days

3,055

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12511–12540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37229	medium	6.5/10	WordPress Blogmentor – Blog Layouts for Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37239	medium	5.9/10	WordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37244	medium	6.5/10	WordPress Ninja Beaver Add-ons for Beaver Builder plugin <= 2.4.5 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37245	high	7.1/10	WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37246	medium	6.5/10	WordPress Gallery Slideshow plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37257	high	7.1/10	WordPress Permalink Manager Lite plugin <= 2.4.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37258	high	7.1/10	WordPress Social Rocket plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37259	high	7.1/10	WordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37261	high	7.1/10	WordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37262	high	7.1/10	WordPress Online Booking & Scheduling Calendar plugin <= 4.4.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37263	medium	6.5/10	WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37264	high	7.1/10	WordPress Groundhogg plugin <= 3.4.2.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37265	medium	6.5/10	WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37267	high	7.1/10	WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37271	medium	5.9/10	WordPress Print My Blog plugin <= 3.27.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37275	high	7.1/10	WordPress NextScripts plugin <= 4.4.7 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37278	medium	5.9/10	WordPress Cards for Beaver Builder plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37409	medium	5.9/10	WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.4 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37414	medium	5.9/10	WordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37416	high	7.1/10	WordPress WP Photo Album Plus plugin <= 8.8.00.002 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37422	medium	6.5/10	WordPress Progress Planner plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37428	medium	6.5/10	WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37429	medium	5.9/10	WordPress Login with phone number plugin <= 1.7.35 - Admin+ Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37432	medium	5.9/10	WordPress Esteem theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37433	high	7.1/10	WordPress Mailster plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37434	medium	5.9/10	WordPress Atarim plugin <= 3.31 - Authenticated Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37436	high	7.1/10	WordPress Uncanny Toolkit Pro for LearnDash plugin < 4.1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37445	medium	6.5/10	WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-5004	—	—	CM Popup Plugin for WordPress < 1.6.6 - Contributor+ Stored XSS	Jul 22, 2024 2y ago
CVE-2024-37446	medium	5.9/10	WordPress Chained Quiz plugin <= 1.3.2.8 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago