Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,035

All time

Critical · Active

12,276

CVSS ≥ 9.0

New · 14 days

2,180

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 13741–13770 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-41957	high	8.6/10	WordPress Simple Membership plugin <= 4.3.4 - Unauthenticated Membership Role Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41956	high	8.8/10	WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability	May 17, 2024 2y ago
CVE-2023-41955	high	8.8/10	WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41954	high	8.6/10	WordPress ProfilePress plugin <= 4.13.1 - Unauthenticated Limited Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41665	high	8.8/10	WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-41243	high	8.8/10	WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability	May 17, 2024 2y ago
CVE-2023-39163	high	8.6/10	WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-38399	high	8.6/10	WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-37999	critical	9.8/10	WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-37888	high	7.6/10	WordPress Phlox Core Elements plugin <= 2.14.0 - Unauthenticated Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-37866	high	7.2/10	WordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-37389	high	8.8/10	WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-37385	high	7.3/10	WordPress Consulting theme <= 6.5.6 - Local File Inclusion	May 17, 2024 2y ago
CVE-2023-35881	high	7.6/10	WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-34186	medium	5.3/10	WordPress Headless CMS plugin <= 2.0.3 - Broken Authentication vulnerability	May 17, 2024 2y ago
CVE-2023-33321	medium	5.3/10	WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure	May 17, 2024 2y ago
CVE-2023-33310	medium	6.0/10	WordPress Unite Gallery Lite plugin <= 1.7.59 - Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-32297	critical	9.0/10	WordPress LWS Affiliation plugin <= 2.2.6 - Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-32244	critical	9.8/10	WordPress Woodmart Core plugin <= 1.0.36 - Privilege Escalation	May 17, 2024 2y ago
CVE-2023-32129	medium	4.3/10	WordPress Editorialmag theme <= 1.1.9 - Authenticated Arbitrary Plugin Activation	May 17, 2024 2y ago
CVE-2023-32110	high	7.6/10	WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-26540	critical	9.8/10	WordPress Houzez theme <= 2.7.1 - Privilege Escalation	May 17, 2024 2y ago
CVE-2023-26526	high	7.7/10	WordPress Bookly plugin <= 21.7.1 - Authenticated Arbitrary File Deletion vulnerability	May 17, 2024 2y ago
CVE-2023-26009	critical	9.8/10	WordPress Houzez Login Register plugin <= 2.6.3 - Privilege Escalation	May 17, 2024 2y ago
CVE-2023-25701	critical	9.8/10	WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation	May 17, 2024 2y ago
CVE-2023-25444	critical	9.1/10	WordPress JS Help Desk – Best Help Desk & Support Plugin plugin <= 2.7.7 - Arbitrary File Upload vulnerability	May 17, 2024 2y ago
CVE-2023-25050	high	7.1/10	WordPress Shortcodes Ultimate plugin <= 5.12.6 - Arbitrary File Download vulnerability	May 17, 2024 2y ago
CVE-2023-24379	medium	6.8/10	WordPress Landing Page Builder – Free Landing Page Templates plugin <= 3.1.9.9 - Local File Inclusion vulnerability	May 17, 2024 2y ago
CVE-2023-23990	high	7.6/10	WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerability	May 17, 2024 2y ago
CVE-2023-23988	high	7.5/10	WordPress My Tickets plugin <= 1.9.11 - Payment Bypass Vulnerability	May 17, 2024 2y ago