Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,021

All time

Critical · Active

12,271

CVSS ≥ 9.0

New · 14 days

2,188

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12931–12960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37466	medium	6.5/10	WordPress Mega Elements plugin <= 1.2.2 - Contributor+ Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37480	medium	6.5/10	WordPress Apollo13 Framework Extensions plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37485	high	7.1/10	WordPress bbPress Notify (No-Spam) plugin <= 2.18.3 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-38781	high	7.1/10	WordPress CopySafe Web Protection plugin <= 3.15 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-38782	medium	6.5/10	WordPress Leaflet Maps Marker plugin <= 3.12.9 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-38784	medium	5.9/10	WordPress Livemesh Addons for Beaver Builder plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-38785	medium	6.5/10	WordPress Gutenverse plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-38786	medium	6.5/10	WordPress CoziPress theme <= 1.0.30 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37487	high	7.1/10	WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37488	medium	6.5/10	WordPress HelloAsso plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37489	medium	6.5/10	WordPress Ocean Extra plugin <= 2.2.9 - Authenticated Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37492	medium	6.5/10	WordPress Gutenberg plugin <= 18.6.0 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37495	medium	6.5/10	WordPress Create by Mediavine plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37500	medium	6.5/10	WordPress Beaver Builder plugin <= 2.8.2.2 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37507	medium	6.5/10	WordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37509	high	7.1/10	WordPress MakeCommerce for WooCommerce plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37512	medium	6.5/10	WordPress NEX-Forms – Ultimate Form Builder plugin <= 8.5.10 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37514	medium	6.5/10	WordPress CopySafe Web Protection plugin <= 3.14 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37515	medium	5.8/10	WordPress XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin] plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37519	medium	6.5/10	WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37521	medium	6.5/10	WordPress zBench theme <= 1.4.2 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37522	medium	5.9/10	WordPress CC & BCC for Woocommerce Order Emails plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37523	medium	5.9/10	WordPress Login Logo Editor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37536	medium	5.9/10	WordPress Easy Custom Code (LESS/CSS/JS) Plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37537	medium	5.9/10	WordPress WS Contact Form plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37538	medium	5.9/10	WordPress Link To Bible plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37545	medium	5.9/10	WordPress Floating Social Media Links plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37548	medium	5.9/10	WordPress Meks Easy Ads Widget plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37549	medium	5.9/10	WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37550	medium	5.9/10	WordPress Template Kit – Export plugin <= 1.0.22 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago