Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

353,998

All time

Critical · Active

12,559

CVSS ≥ 9.0

New · 14 days

1,491

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 13441–13470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-32805	medium	6.5/10	WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-32811	medium	5.3/10	WordPress USPS Shipping for WooCommerce – Live Rates plugin <= 1.9.4 - Sensitive Data Exposure via Log File vulnerability	Jun 9, 2024 2y ago
CVE-2024-32813	medium	5.3/10	WordPress Integrate Google Drive plugin <= 1.3.9 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-32814	medium	5.3/10	WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-32818	medium	4.3/10	WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-32820	medium	5.3/10	WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.2 - Broken Access Control lead to Notice Dismissal vulnerability	Jun 9, 2024 2y ago
CVE-2024-32821	medium	4.3/10	WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-32824	medium	5.4/10	WordPress Evergreen Content Poster plugin <= 1.4.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33543	high	7.5/10	WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33545	medium	5.3/10	WordPress WZone plugin <= 14.0.10 - Unauthenticated Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33547	high	8.3/10	WordPress WZone plugin <= 14.0.10 - Site Wide Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33555	high	8.1/10	WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33561	high	7.5/10	WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33563	high	7.6/10	WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33564	high	8.8/10	WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability	Jun 9, 2024 2y ago
CVE-2024-33565	critical	9.1/10	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.3 - Unauthenticated Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-33572	medium	4.3/10	WordPress Nexter Blocks plugin <= 3.2.5 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-34435	medium	4.3/10	WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-35660	medium	6.5/10	WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on API vulnerability	Jun 9, 2024 2y ago
CVE-2024-35669	medium	4.3/10	WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31274	medium	5.3/10	WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31273	medium	5.3/10	WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31267	medium	4.3/10	WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31261	medium	4.3/10	WordPress Announcer – Notification & message bars plugin <= 6.0 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31252	medium	4.3/10	WordPress Responsive Lightbox & Gallery plugin <= 2.4.6 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31248	medium	4.3/10	WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-31244	critical	9.8/10	WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability	Jun 9, 2024 2y ago
CVE-2024-31243	high	7.5/10	WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability	Jun 9, 2024 2y ago
CVE-2024-30544	medium	5.3/10	WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability	Jun 9, 2024 2y ago
CVE-2024-30529	medium	5.3/10	WordPress Tainacan plugin <= 0.20.7 - Broken Access Control vulnerability	Jun 9, 2024 2y ago