Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,982

All time

Critical · Active

11,136

CVSS ≥ 9.0

New · 14 days

3,295

Newly disclosed

Feed last synced

56 mins ago

Data freshness

Showing 13201–13230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-49741	low	3.7/10	WordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48753	medium	5.3/10	WordPress Restricted Site Access plugin <= 7.4.1 - IP Restriction Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48747	medium	6.5/10	WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability	Jun 4, 2024 2y ago
CVE-2023-48745	medium	5.3/10	WordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48335	low	3.7/10	WordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability	Jun 4, 2024 2y ago
CVE-2023-48318	medium	5.3/10	WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48290	medium	5.3/10	WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability	Jun 4, 2024 2y ago
CVE-2023-48285	medium	5.3/10	WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-48276	medium	5.3/10	WordPress WP Forms Puzzle Captcha plugin <= 4.1 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48271	medium	5.3/10	WordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-47837	high	8.3/10	WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-47818	low	3.7/10	WordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability	Jun 4, 2024 2y ago
CVE-2023-47769	low	3.7/10	WordPress WP Maintenance plugin <= 6.1.3 - IP Filtering Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-47513	medium	5.4/10	WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.3.2 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-47189	medium	5.3/10	WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-46630	high	7.5/10	WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability	Jun 4, 2024 2y ago
CVE-2023-46310	medium	5.3/10	WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-45635	medium	5.4/10	WordPress Responsive Tabs plugin < 4.0.6 - HTML Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-45053	medium	4.3/10	WordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-45009	medium	5.3/10	WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-44235	medium	5.3/10	WordPress WP Captcha plugin <= 2.0.0 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-41134	medium	5.3/10	WordPress Antispam Bee plugin <= 2.11.3 - Country IP Restriction Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-40673	medium	6.5/10	WordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-40557	medium	5.4/10	WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-40332	medium	5.3/10	WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-39161	medium	5.4/10	WordPress Discussion Board plugin <= 2.4.8 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-38520	medium	6.5/10	WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering	Jun 4, 2024 2y ago
CVE-2023-37865	medium	5.3/10	WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability	Jun 4, 2024 2y ago
CVE-2023-34001	medium	5.3/10	WordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-33930	critical	9.1/10	WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability	Jun 4, 2024 2y ago