Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,021

All time

Critical · Active

12,271

CVSS ≥ 9.0

New · 14 days

2,188

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 12961–12990 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-37551	medium	5.9/10	WordPress Simple Social Share plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37552	medium	5.9/10	WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37556	medium	5.9/10	WordPress WordPress Notification Bar plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37557	medium	5.9/10	WordPress WP Cookie Law Info plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37558	medium	5.9/10	WordPress WPFavicon plugin <= 2.1.1 - Cross-Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37559	high	7.1/10	WordPress counterpoint theme <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 21, 2024 2y ago
CVE-2024-37561	medium	5.9/10	WordPress Plugin Notes Plus plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37562	medium	5.9/10	WordPress Simple Post Notes plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37563	medium	6.5/10	WordPress TOCHAT.BE plugin <= 1.3.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37565	medium	5.9/10	WordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37918	medium	6.5/10	WordPress ConeBlog plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37919	medium	5.9/10	WordPress Timeline Module for Beaver Builder plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37920	high	7.1/10	WordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37922	medium	6.5/10	WordPress Premium Addons for Elementor plugin <= 4.10.34 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37936	medium	6.5/10	WordPress Tabs For WPBakery Page Builder plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37943	medium	5.8/10	WordPress YITH WooCommerce Ajax Product Filter plugin <= 5.1.0 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37944	medium	6.5/10	WordPress WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin <= 5.9.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37946	medium	5.9/10	WordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37947	medium	5.9/10	WordPress Tutor LMS plugin <= 2.7.2 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37948	medium	6.5/10	WordPress Caxton – Create Pro page layouts in Gutenberg plugin <= 1.30.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37949	medium	6.5/10	WordPress Responsive Mobile theme <= 1.15.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37950	medium	5.9/10	WordPress Master Popups plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37951	medium	6.5/10	WordPress Magical Posts Display plugin <= 1.2.38 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37953	high	7.1/10	WordPress MBE eShip plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37954	high	7.1/10	WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37955	medium	6.5/10	WordPress GutSlider – All in One Block Slider plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37956	medium	6.5/10	WordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37957	medium	6.5/10	WordPress Bradmax Player plugin <= 1.1.27 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37958	medium	6.5/10	WordPress Meks Smart Author Widget plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37959	medium	6.5/10	WordPress Power BI Embedded for WordPress plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago