Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,598

All time

Critical · Active

11,108

CVSS ≥ 9.0

New · 14 days

3,083

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 12571–12600 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37536	medium	5.9/10	WordPress Easy Custom Code (LESS/CSS/JS) Plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37537	medium	5.9/10	WordPress WS Contact Form plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37538	medium	5.9/10	WordPress Link To Bible plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37545	medium	5.9/10	WordPress Floating Social Media Links plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37548	medium	5.9/10	WordPress Meks Easy Ads Widget plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37549	medium	5.9/10	WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37550	medium	5.9/10	WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37551	medium	5.9/10	WordPress Simple Social Share plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37552	medium	5.9/10	WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37556	medium	5.9/10	WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37557	medium	5.9/10	WordPress WP Cookie Law Info plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37558	medium	5.9/10	WordPress WPFavicon plugin <= 2.1.1 - Cross-Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37559	high	7.1/10	WordPress counterpoint theme <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37561	medium	5.9/10	WordPress Plugin Notes Plus plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37562	medium	5.9/10	WordPress Simple Post Notes plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37563	medium	6.5/10	WordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37565	medium	5.9/10	WordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37918	medium	6.5/10	WordPress ConeBlog plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37919	medium	5.9/10	WordPress Timeline Module for Beaver Builder plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37920	high	7.1/10	WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37922	medium	6.5/10	WordPress Premium Addons for Elementor plugin <= 4.10.34 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37936	medium	6.5/10	WordPress Tabs For WPBakery Page Builder plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37943	medium	5.8/10	WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37944	medium	6.5/10	WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37946	medium	5.9/10	WordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37947	medium	5.9/10	WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37948	medium	6.5/10	WordPress Caxton – Create Pro page layouts in Gutenberg plugin <= 1.30.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37949	medium	6.5/10	WordPress Responsive Mobile theme <= 1.15.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37950	medium	5.9/10	WordPress Master Popups plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37951	medium	6.5/10	WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago