Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,020

All time

Critical · Active

12,271

CVSS ≥ 9.0

New · 14 days

2,207

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12721–12750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-43246	high	7.1/10	WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43262	medium	6.5/10	WordPress Busiprof theme <= 2.4.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43263	medium	6.5/10	WordPress Visual Composer Starter theme <= 3.3 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43267	medium	6.5/10	WordPress Mega Addons For Elementor plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43278	medium	6.5/10	WordPress Meta Field Block plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43279	high	7.1/10	WordPress Newsletters plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43284	medium	6.5/10	WordPress WP Travel Gutenberg Blocks plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43291	medium	5.9/10	WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43292	medium	5.9/10	WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.16 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43294	medium	6.5/10	WordPress Bold Timeline Lite plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43303	high	7.1/10	WordPress White Label CMS plugin <= 2.7.4 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43304	high	7.1/10	WordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43305	medium	6.5/10	WordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.11 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43306	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43307	medium	6.5/10	WordPress Structured Content (JSON-LD) #wpsc plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43308	medium	6.5/10	WordPress Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43309	medium	6.5/10	WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43313	high	7.1/10	WordPress FormFacade plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43318	medium	6.5/10	WordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43320	medium	6.5/10	WordPress WPBakery Page Builder Addons plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43321	medium	6.5/10	WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43324	medium	5.9/10	WordPress Clever Addons for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43327	high	7.1/10	WordPress Invite Anyone plugin <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43329	medium	6.5/10	WordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43330	high	7.1/10	WordPress PowerPack for Beaver Builder plugin < 2.37.4 - Reflected Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43335	medium	6.5/10	WordPress Responsive Blocks – WordPress Gutenberg Blocks plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43238	high	7.1/10	WordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-39666	medium	5.9/10	WordPress WooCommerce plugin <= 9.1.2 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43276	high	7.1/10	WordPress Child Theme Creator by Orbisius plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago
CVE-2024-43342	medium	6.5/10	WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability	Aug 18, 2024 2y ago