Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,046

All time

Critical · Active

11,140

CVSS ≥ 9.0

New · 14 days

2,667

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 13561–13590 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34379	medium	4.3/10	WordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability	May 6, 2024 2y ago
CVE-2024-34367	high	7.1/10	WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerability	May 6, 2024 2y ago
CVE-2024-34386	high	7.6/10	WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability	May 6, 2024 2y ago
CVE-2024-34412	high	8.5/10	WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability	May 6, 2024 2y ago
CVE-2024-34368	medium	5.3/10	WordPress Mooberry Book Manager plugin <= 4.15.12 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-34382	medium	5.3/10	WordPress Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.18 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-34383	medium	5.3/10	WordPress SEOPress plugin <= 7.7.1 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-34388	high	7.5/10	WordPress GDPR Compliance plugin <= 1.2.5 - Sensitive Data Exposure vulnerability	May 6, 2024 2y ago
CVE-2024-32807	high	8.5/10	WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability	May 6, 2024 2y ago
CVE-2024-33914	medium	4.3/10	WordPress Exclusive Addons for Elementor plugin <= 2.6.9.1 - Broken Access Control on Post Duplication vulnerability	May 3, 2024 2y ago
CVE-2024-33915	medium	4.3/10	WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33919	medium	6.5/10	WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33920	medium	5.3/10	WordPress Democracy Poll plugin <= 6.0.3 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33921	medium	4.3/10	WordPress ReviewX plugin <= 1.6.21 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33923	medium	6.3/10	WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33925	medium	4.3/10	WordPress Embed Google Fonts plugin <= 3.1.0 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33929	medium	5.3/10	WordPress Directorist plugin <= 7.8.6 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33931	medium	6.5/10	WordPress JW Player for WordPress plugin <= 2.3.3 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33937	medium	4.3/10	WordPress Progressive WordPress (PWA) plugin <= 2.1.13 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-24710	medium	4.3/10	WordPress Feed Them Social plugin <= 4.2.0 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-32810	high	7.6/10	WordPress ShortPixel Critical CSS plugin <= 1.0.2 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2023-25457	medium	5.3/10	WordPress Slider Carousel – Responsive Image Slider plugin <=1.5.1 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2023-44472	medium	4.3/10	WordPress Unyson plugin <= 2.7.28 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33941	medium	5.3/10	WordPress iPanorama 360 plugin <= 1.8.1 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-32831	medium	6.5/10	WordPress Accessibility Widget plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability	May 3, 2024 2y ago
CVE-2024-33916	medium	6.5/10	WordPress CPO Companion plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability	May 3, 2024 2y ago
CVE-2024-33918	medium	5.9/10	WordPress AJAX Login and Registration modal popup + inline form plugin <= 2.23 - Cross Site Scripting (XSS) vulnerability	May 3, 2024 2y ago
CVE-2024-33924	high	7.1/10	WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Cross Site Scripting (XSS) vulnerability	May 3, 2024 2y ago
CVE-2024-33926	medium	6.5/10	WordPress GWP-Histats plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	May 3, 2024 2y ago
CVE-2024-33927	medium	6.5/10	WordPress Giphypress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability	May 3, 2024 2y ago