Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,002

All time

Critical · Active

12,559

CVSS ≥ 9.0

New · 14 days

1,495

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 13561–13590 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-30484	medium	4.3/10	WordPress RT Easy Builder plugin <= 2.0 - Broken Access Control vulnerability	Jun 4, 2024 2y ago
CVE-2024-35670	medium	5.3/10	WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerability	Jun 4, 2024 2y ago
CVE-2024-34759	medium	6.5/10	WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35672	high	7.5/10	WordPress Netgsm plugin <= 2.9.19 - Broken Access Control vulnerability	Jun 4, 2024 2y ago
CVE-2024-25095	high	7.5/10	WordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Sensitive Data Exposure via Log File vulnerability	Jun 4, 2024 2y ago
CVE-2024-0756	—	—	Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe Injection	Jun 4, 2024 2y ago
CVE-2024-35649	medium	6.5/10	WordPress Save as PDF Plugin by Pdfcrowd plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35651	medium	6.5/10	WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35652	high	7.1/10	WordPress Event Tickets with Ticket Scanner plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35653	medium	6.5/10	WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35654	medium	6.5/10	WordPress Responsive theme <= 5.0.3 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35655	medium	5.9/10	WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35664	high	7.1/10	WordPress WPvivid Backup for MainWP plugin <= 0.9.32 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35666	medium	6.5/10	WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35668	high	7.1/10	WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35782	medium	6.5/10	WordPress Cowidgets – Elementor Addons plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	Jun 4, 2024 2y ago
CVE-2024-35700	critical	9.8/10	WordPress UserPro plugin <= 5.1.8 - Unauthenticated Account Takeover vulnerability	Jun 4, 2024 2y ago
CVE-2024-35629	critical	9.6/10	WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-34792	critical	9.1/10	WordPress Dextaz Ping plugin <= 0.65 - Remote Code Execution (RCE) vulnerability	Jun 4, 2024 2y ago
CVE-2024-34554	high	8.5/10	WordPress Stockholm Core plugin <= 2.4.1 - Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-34552	high	8.5/10	WordPress Stockholm theme <= 9.6 - Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-34551	critical	9.0/10	WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-34384	medium	6.5/10	WordPress Sina Extension for Elementor plugin <= 3.5.1 - Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-33628	high	8.8/10	WordPress XforWooCommerce plugin <= 2.0.2 - Authenticated Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-33568	high	8.5/10	WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability	Jun 4, 2024 2y ago
CVE-2024-33560	critical	9.0/10	WordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-33557	high	8.5/10	WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-33541	medium	6.5/10	WordPress Better Elementor Addons plugin <= 1.4.1 - Local File Inclusion vulnerability	Jun 4, 2024 2y ago
CVE-2024-25600	critical	10.0/10	WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability	Jun 4, 2024 2y ago
CVE-2023-52176	medium	5.3/10	WordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerability	Jun 4, 2024 2y ago