Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

341,982

All time

Critical · Active

11,136

CVSS ≥ 9.0

New · 14 days

2,736

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 13231–13260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-28494	medium	4.3/10	WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability	Jun 4, 2024 2y ago
CVE-2024-0757	—	—	Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE	Jun 4, 2024 2y ago
CVE-2023-28492	medium	4.3/10	WordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability	Jun 3, 2024 2y ago
CVE-2023-27460	medium	4.3/10	WordPress CP Contact Form with PayPal plugin <= 1.3.34 - Missing Authorization Leading To Feedback Submission vulnerability	Jun 3, 2024 2y ago
CVE-2023-27437	low	3.7/10	WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability	Jun 3, 2024 2y ago
CVE-2023-26523	medium	4.3/10	WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability	Jun 3, 2024 2y ago
CVE-2023-26521	medium	4.3/10	WordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerability	Jun 3, 2024 2y ago
CVE-2023-24373	low	3.7/10	WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability	Jun 3, 2024 2y ago
CVE-2024-35632	medium	4.3/10	WordPress Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34385	medium	5.9/10	WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34766	medium	6.5/10	WordPress ChaosTheory theme <= 1.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34767	medium	6.5/10	WordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34769	medium	6.5/10	WordPress Elegant Blocks – Amazing Gutenberg Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34770	medium	6.5/10	WordPress Popup Maker WP plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34789	medium	6.5/10	WordPress Post Grid Elementor Addon plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34790	medium	5.9/10	WordPress Download ImageMagick Sharpen Resized Images plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34791	medium	6.5/10	WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34793	medium	5.9/10	WordPress WP Next Post Navi plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34794	high	7.1/10	WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34795	medium	6.5/10	WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34796	medium	5.9/10	WordPress PopupAlly plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34797	medium	5.9/10	WordPress Simple Popup Manager plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34801	medium	6.5/10	WordPress Praison SEO WordPress plugin <= 4.0.15 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-35631	high	7.1/10	WordPress FV Flowplayer Video Player plugin <= 7.5.45.7212 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-35630	high	7.6/10	WordPress WP TripAdvisor Review Slider plugin <= 12.6 - SQL Injection vulnerability	Jun 3, 2024 2y ago
CVE-2024-34754	medium	5.3/10	WordPress Contact Form Widget plugin <= 1.3.9 - Sensitive Data Exposure vulnerability	Jun 3, 2024 2y ago
CVE-2024-34798	medium	5.3/10	WordPress Debug Log – Manger Tool plugin <= 1.4.5 - Sensitive Data Exposure vulnerability	Jun 3, 2024 2y ago
CVE-2024-34803	medium	4.3/10	WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability	Jun 3, 2024 2y ago
CVE-2024-35633	medium	4.4/10	WordPress Blocksy Companion plugin <= 2.0.42 - Server Side Request Forgery (SSRF) vulnerability	Jun 3, 2024 2y ago
CVE-2024-35635	medium	4.4/10	WordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerability	Jun 3, 2024 2y ago