Feed live

WordPress vulnerabilities - every known CVE affecting WordPress core, plugins, and themes

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every CVE that affects WordPress core, plugins, themes, and page builders. Scored and updated from the official NVD feed.

Total CVEs tracked

336,843

All time

Critical · Active

10,645

CVSS ≥ 9.0

New · 14 days

1,502

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1351–1380 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-28079	high	8.1/10	WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28078	medium	4.9/10	WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28077	high	8.1/10	WordPress Vapester theme <= 1.1.10 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28076	high	7.5/10	WordPress Guff theme <= 1.0.1 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28075	high	7.1/10	WordPress Porto theme <= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28074	critical	9.8/10	WordPress Pizza House theme <= 1.4.0 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28072	high	7.1/10	WordPress pixfort Core plugin <= 3.2.22 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28071	medium	6.3/10	WordPress pixfort Core plugin <= 3.2.22 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28069	high	8.1/10	WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28068	high	8.1/10	WordPress Rhythmo theme <= 1.3.4 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28067	high	8.1/10	WordPress Bassein theme <= 1.0.15 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28066	high	8.1/10	WordPress Legrand theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28065	high	8.1/10	WordPress Eject theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28064	high	8.1/10	WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28063	high	8.1/10	WordPress Asia Garden theme <= 1.3.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28062	high	8.1/10	WordPress Happy Baby theme <= 1.2.12 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28061	high	8.1/10	WordPress Tiger Claw theme <= 1.1.14 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28060	high	8.1/10	WordPress S.King theme <= 1.5.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28059	high	8.1/10	WordPress Dermatology Clinic theme <= 1.4.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28058	high	8.1/10	WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28057	high	8.1/10	WordPress Mandala theme <= 2.8 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28056	high	8.1/10	WordPress MCKinney's Politics theme <= 1.2.8 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28055	high	8.1/10	WordPress M.Williamson theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28054	high	8.1/10	WordPress Legal Stone theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28053	high	8.1/10	WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28052	high	8.1/10	WordPress Peter Mason theme <= 1.4.5 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28051	high	8.1/10	WordPress Yacht Rental theme <= 2.6 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28050	high	8.1/10	WordPress Beacon theme <= 2.24 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28049	high	8.1/10	WordPress Police Department theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-28048	high	8.1/10	WordPress FlashMart theme <= 2.0.15 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago