Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,043

All time

Critical · Active

11,140

CVSS ≥ 9.0

New · 14 days

2,666

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 13471–13500 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-1467	medium	4.3/10	Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request Forgery	May 9, 2024 2y ago
CVE-2024-4082	medium	4.3/10	Joli FAQ SEO – WordPress FAQ Plugin <= 1.3.2 - Cross-Site Request Forgery	May 9, 2024 2y ago
CVE-2024-3923	medium	6.4/10	Beaver Builder – WordPress Page Builder <= 2.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	May 9, 2024 2y ago
CVE-2024-4312	medium	4.3/10	Soccer Engine – Soccer Plugin for WordPress <= 1.12 - Cross-Site Request Forgery	May 9, 2024 2y ago
CVE-2024-32712	high	7.5/10	WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability	May 9, 2024 2y ago
CVE-2024-32717	medium	6.5/10	WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerability	May 9, 2024 2y ago
CVE-2024-32719	medium	5.3/10	WordPress WP Club Manager plugin <= 2.2.11 - Broken Access Control vulnerability	May 9, 2024 2y ago
CVE-2024-32724	high	7.5/10	WordPress SharkDropship and Affiliate for AliExpress, eBay, Amazon, Etsy plugin <= 2.1.1 - Arbitrary Content Deletion vulnerability	May 9, 2024 2y ago
CVE-2024-34549	medium	5.3/10	WordPress WP Job Manager plugin <= 2.2.2 - Sensitive Data Exposure vulnerability	May 9, 2024 2y ago
CVE-2024-34550	medium	5.3/10	WordPress Dynamics 365 Integration plugin <= 1.3.17 - Sensitive Data Exposure vulnerability	May 9, 2024 2y ago
CVE-2024-34556	medium	5.3/10	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Sensitive Data Exposure via Exported File vulnerability	May 9, 2024 2y ago
CVE-2024-34559	high	7.5/10	WordPress Ghost plugin <= 1.4.0 - Sensitive Data Exposure via Log File vulnerability	May 9, 2024 2y ago
CVE-2024-34433	medium	4.4/10	WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability	May 9, 2024 2y ago
CVE-2024-4606	medium	5.4/10	WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerability	May 9, 2024 2y ago
CVE-2024-34439	medium	4.3/10	WordPress DS Site Message plugin <= 1.14.4 - Cross Site Request Forgery (CSRF) vulnerability	May 9, 2024 2y ago
CVE-2024-34427	medium	4.3/10	WordPress WP Favorite Posts plugin <= 1.6.8 - Cross Site Request Forgery (CSRF) vulnerability	May 9, 2024 2y ago
CVE-2024-34557	medium	4.3/10	WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability	May 9, 2024 2y ago
CVE-2024-29800	high	8.0/10	WordPress Timber plugin <= 1.23.0 - Deserialization of untrusted data vulnerability	May 9, 2024 2y ago
CVE-2024-34415	medium	6.5/10	WordPress Thim Elementor Kit plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34417	medium	5.9/10	WordPress Viet Nam Affiliate plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34418	medium	5.9/10	WordPress WPCS ( WordPress Custom Search ) plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34419	medium	5.9/10	WordPress Configure Login Timeout plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34420	medium	5.9/10	WordPress Comments Evolved for WordPress plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34421	medium	6.5/10	WordPress BlogLentor – Blog Designer Pack for Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34422	medium	5.9/10	WordPress Viet Affiliate Link plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34423	medium	5.9/10	WordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34424	medium	5.9/10	WordPress Featured Content Gallery plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34425	medium	5.9/10	WordPress QuickieBar plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34426	medium	5.9/10	WordPress Brozzme Scroll Top plugin <= 1.8.5 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago
CVE-2024-34428	medium	5.9/10	WordPress AWSOM News Announcement plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability	May 9, 2024 2y ago