Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,002

All time

Critical · Active

12,559

CVSS ≥ 9.0

New · 14 days

1,495

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 13591–13620 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-52147	low	3.7/10	WordPress All-In-One Security (AIOS) plugin <= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerability	Jun 4, 2024 2y ago
CVE-2023-51667	medium	5.3/10	WordPress Rate my Post – WP Rating System plugin <= 3.4.2 - Broken Access Control vulnerability	Jun 4, 2024 2y ago
CVE-2023-51544	medium	5.3/10	WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-51543	medium	5.3/10	WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-51542	medium	5.3/10	WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-51511	medium	6.5/10	WordPress Booster Elite for WooCommerce plugin < 7.1.3 - Authenticated Production Creation/Modification Vulnerability	Jun 4, 2024 2y ago
CVE-2023-49852	medium	6.5/10	WordPress Responsive Slick Slider WordPress plugin <= 1.4 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-49822	low	3.7/10	WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability	Jun 4, 2024 2y ago
CVE-2023-49774	medium	5.3/10	WordPress WP Photo Album Plus plugin <= 8.5.02.005 - IP Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-49748	low	3.7/10	WordPress WPS Hide Login plugin <= 1.9.11 - Secret Login Page Location Disclosure on Multisites vulnerability	Jun 4, 2024 2y ago
CVE-2023-49741	low	3.7/10	WordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48753	medium	5.3/10	WordPress Restricted Site Access plugin <= 7.4.1 - IP Restriction Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48747	medium	6.5/10	WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability	Jun 4, 2024 2y ago
CVE-2023-48745	medium	5.3/10	WordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48335	low	3.7/10	WordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability	Jun 4, 2024 2y ago
CVE-2023-48318	medium	5.3/10	WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48290	medium	5.3/10	WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability	Jun 4, 2024 2y ago
CVE-2023-48285	medium	5.3/10	WordPress Accept Stripe Payments plugin <= 2.0.79 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-48276	medium	5.3/10	WordPress WP Forms Puzzle Captcha plugin <= 4.1 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-48271	medium	5.3/10	WordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-47837	high	8.3/10	WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-47818	low	3.7/10	WordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability	Jun 4, 2024 2y ago
CVE-2023-47769	low	3.7/10	WordPress WP Maintenance plugin <= 6.1.3 - IP Filtering Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-47513	medium	5.4/10	WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.3.2 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-47189	medium	5.3/10	WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-46630	high	7.5/10	WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability	Jun 4, 2024 2y ago
CVE-2023-46310	medium	5.3/10	WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-45635	medium	5.4/10	WordPress Responsive Tabs plugin < 4.0.6 - HTML Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-45053	medium	4.3/10	WordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-45009	medium	5.3/10	WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability	Jun 4, 2024 2y ago