Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

353,994

All time

Critical · Active

12,559

CVSS ≥ 9.0

New · 14 days

1,490

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 13381–13410 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34800	high	7.6/10	WordPress Crafthemes Demo Import plugin <= 3.3 - Arbitrary plugin Installation vulnerability	Jun 10, 2024 2y ago
CVE-2024-34762	critical	9.9/10	Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability	Jun 10, 2024 2y ago
CVE-2024-34761	high	8.5/10	Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability	Jun 10, 2024 2y ago
CVE-2024-4744	medium	5.3/10	WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-4745	medium	4.3/10	WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-22296	medium	4.3/10	WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-22298	medium	5.3/10	WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-21751	medium	5.4/10	WordPress RabbitLoader plugin <= 2.19.13 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-23524	medium	5.3/10	WordPress PilotPress plugin <= 2.0.30 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-4746	medium	4.3/10	WordPress Netgsm plugin <= 2.9.32 - Broken Access Control + CSRF vulnerability	Jun 10, 2024 2y ago
CVE-2024-35717	medium	4.3/10	WordPress Media Slider plugin <= 1.3.9 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35720	medium	4.3/10	WordPress Album Gallery – WordPress Gallery plugin <= 1.5.7 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35721	medium	4.3/10	WordPress Image Gallery plugin <= 1.4.5 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35722	medium	4.3/10	WordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.4.0 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35723	medium	4.3/10	WordPress Dashboard To-Do List plugin <= 1.2.0 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35724	medium	4.3/10	WordPress Bosa Elementor Addons and Templates for WooCommerce plugin <= 1.0.12 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35725	medium	4.3/10	WordPress LA-Studio Element Kit for Elementor plugin <= 1.3.6 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35726	medium	4.3/10	WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35727	medium	4.3/10	WordPress Extra Product Options for WooCommerce plugin <= 3.0.6 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35729	medium	5.3/10	WordPress Tickera plugin <= 3.5.2.6 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35735	medium	5.3/10	WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35741	medium	4.3/10	WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35742	medium	5.3/10	WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerability	Jun 10, 2024 2y ago
CVE-2024-35748	medium	5.3/10	WordPress WooCommerce Dropshipping plugin <= 5.0.4 - Unauthenticated Arbitrary Email Sending vulnerability	Jun 9, 2024 2y ago
CVE-2024-32081	medium	4.3/10	WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-34802	medium	5.3/10	WordPress AdFoxly plugin <= 1.8.5 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-35661	medium	5.3/10	WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-35662	medium	5.4/10	WordPress Simple COD Fees for WooCommerce plugin <= 2.0.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31275	high	8.2/10	WordPress EventPrime plugin <= 3.3.4 - Booking Price Manipulation vulnerability	Jun 9, 2024 2y ago
CVE-2024-31276	medium	5.3/10	WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability	Jun 9, 2024 2y ago