Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,003

All time

Critical · Active

12,560

CVSS ≥ 9.0

New · 14 days

1,494

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 13621–13650 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-44235	medium	5.3/10	WordPress WP Captcha plugin <= 2.0.0 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-41134	medium	5.3/10	WordPress Antispam Bee plugin <= 2.11.3 - Country IP Restriction Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-40673	medium	6.5/10	WordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-40557	medium	5.4/10	WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-40332	medium	5.3/10	WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-39161	medium	5.4/10	WordPress Discussion Board plugin <= 2.4.8 - Content Injection vulnerability	Jun 4, 2024 2y ago
CVE-2023-38520	medium	6.5/10	WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering	Jun 4, 2024 2y ago
CVE-2023-37865	medium	5.3/10	WordPress IP2Location Country Blocker plugin <= 2.29.1 - IP Bypass Vulnerability vulnerability	Jun 4, 2024 2y ago
CVE-2023-34001	medium	5.3/10	WordPress Hide My WP Ghost – Security Plugin plugin <= 5.0.25 - Captcha Bypass vulnerability	Jun 4, 2024 2y ago
CVE-2023-33930	critical	9.1/10	WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability	Jun 4, 2024 2y ago
CVE-2023-28494	medium	4.3/10	WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability	Jun 4, 2024 2y ago
CVE-2024-0757	—	—	Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE	Jun 4, 2024 2y ago
CVE-2023-28492	medium	4.3/10	WordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability	Jun 3, 2024 2y ago
CVE-2023-27460	medium	4.3/10	WordPress CP Contact Form with PayPal plugin <= 1.3.34 - Missing Authorization Leading To Feedback Submission vulnerability	Jun 3, 2024 2y ago
CVE-2023-27437	low	3.7/10	WordPress Event Espresso 4 Decaf plugin <= 4.10.44.decaf - Bypass vulnerability	Jun 3, 2024 2y ago
CVE-2023-26523	medium	4.3/10	WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability	Jun 3, 2024 2y ago
CVE-2023-26521	medium	4.3/10	WordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerability	Jun 3, 2024 2y ago
CVE-2023-24373	low	3.7/10	WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability	Jun 3, 2024 2y ago
CVE-2024-35632	medium	4.3/10	WordPress Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34385	medium	5.9/10	WordPress YITH WooCommerce Wishlist plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34766	medium	6.5/10	WordPress ChaosTheory theme <= 1.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34767	medium	6.5/10	WordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34769	medium	6.5/10	WordPress Elegant Blocks – Amazing Gutenberg Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34770	medium	6.5/10	WordPress Popup Maker WP plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34789	medium	6.5/10	WordPress Post Grid Elementor Addon plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34790	medium	5.9/10	WordPress Download ImageMagick Sharpen Resized Images plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34791	medium	6.5/10	WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34793	medium	5.9/10	WordPress WP Next Post Navi plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34794	high	7.1/10	WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago
CVE-2024-34795	medium	6.5/10	WordPress Tainacan plugin <= 0.21.3 - Cross Site Scripting (XSS) vulnerability	Jun 3, 2024 2y ago