Feed live

WordPress vulnerabilities - every known CVE affecting WordPress core, plugins, and themes

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every CVE that affects WordPress core, plugins, themes, and page builders. Scored and updated from the official NVD feed.

Total CVEs tracked

335,669

All time

Critical · Active

10,549

CVSS ≥ 9.0

New · 14 days

711

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1231–1260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-28069	high	8.1/10	WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28068	high	8.1/10	WordPress Rhythmo theme <= 1.3.4 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28067	high	8.1/10	WordPress Bassein theme <= 1.0.15 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28066	high	8.1/10	WordPress Legrand theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28065	high	8.1/10	WordPress Eject theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28064	high	8.1/10	WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28063	high	8.1/10	WordPress Asia Garden theme <= 1.3.1 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28062	high	8.1/10	WordPress Happy Baby theme <= 1.2.12 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28061	high	8.1/10	WordPress Tiger Claw theme <= 1.1.14 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28060	high	8.1/10	WordPress S.King theme <= 1.5.3 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28059	high	8.1/10	WordPress Dermatology Clinic theme <= 1.4.3 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28058	high	8.1/10	WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28057	high	8.1/10	WordPress Mandala theme <= 2.8 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28056	high	8.1/10	WordPress MCKinney's Politics theme <= 1.2.8 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28055	high	8.1/10	WordPress M.Williamson theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28054	high	8.1/10	WordPress Legal Stone theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28053	high	8.1/10	WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28052	high	8.1/10	WordPress Peter Mason theme <= 1.4.5 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28051	high	8.1/10	WordPress Yacht Rental theme <= 2.6 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28050	high	8.1/10	WordPress Beacon theme <= 2.24 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28049	high	8.1/10	WordPress Police Department theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28048	high	8.1/10	WordPress FlashMart theme <= 2.0.15 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28047	high	8.1/10	WordPress Victo theme <= 1.4.16 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28046	high	8.1/10	WordPress Law Office theme <= 3.3.0 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28045	high	8.1/10	WordPress N7 \| Golf Club Sports & Events theme <= 2.16.0 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28043	critical	9.8/10	WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme <= 1.0.0 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28042	high	7.1/10	WordPress Listify plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28041	high	8.1/10	WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28039	high	7.5/10	WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerability	Mar 5, 2026 3mo ago
CVE-2026-28038	medium	6.5/10	WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability	Mar 5, 2026 3mo ago