Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,039

All time

Critical · Active

12,276

CVSS ≥ 9.0

New · 14 days

2,157

Newly disclosed

Feed last synced

26 mins ago

Data freshness

Showing 13891–13920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34573	medium	6.5/10	WordPress Pootle Pagebuilder plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34574	medium	5.9/10	WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2023-41651	medium	6.5/10	WordPress Multi-column Tag Map plugin <= 17.0.26 - Broken Access Control vulnerability	May 8, 2024 2y ago
CVE-2023-31234	medium	6.3/10	WordPress Tilda Publishing plugin <= 0.3.23 - Broken Access Control vulnerability	May 7, 2024 2y ago
CVE-2024-34413	medium	5.9/10	WordPress SliceWP Affiliates plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-33570	medium	4.3/10	WordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33576	medium	6.5/10	WordPress WPPizza plugin <= 3.18.10 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33907	medium	5.3/10	WordPress Print My Blog plugin <= 3.26.2 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33908	medium	5.3/10	WordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33910	medium	5.3/10	WordPress Digital Publications by Supsystic plugin <= 1.7.7 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-33912	high	7.1/10	WordPress Academy LMS plugin <= 1.9.16 - Broken Access Control on Paid Courses vulnerability	May 6, 2024 2y ago
CVE-2024-34371	medium	4.3/10	WordPress Login with phone number plugin <= 1.7.18 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34372	medium	5.3/10	WordPress Post Grid Master plugin <= 3.4.7 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34377	medium	4.3/10	WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34378	high	8.6/10	WordPress LeadConnector plugin <= 1.7 - API Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34387	medium	4.3/10	WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability	May 6, 2024 2y ago
CVE-2024-34389	medium	4.3/10	WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability	May 6, 2024 2y ago
CVE-2024-34366	medium	5.9/10	WordPress AltText.ai plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34369	high	7.1/10	WordPress Web Push Notifications – Webpushr plugin <= 4.35.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34373	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34374	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34375	medium	5.9/10	WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34376	medium	6.5/10	WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34380	medium	5.9/10	WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34381	medium	6.5/10	WordPress PropertyHive plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34390	medium	6.5/10	WordPress Post Grid Master plugin <= 3.4.8 - Auth. Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34379	medium	4.3/10	WordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability	May 6, 2024 2y ago
CVE-2024-34367	high	7.1/10	WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerability	May 6, 2024 2y ago
CVE-2024-34386	high	7.6/10	WordPress Auto Affiliate Links plugin <= 6.4.3.1 - SQL Injection vulnerability	May 6, 2024 2y ago
CVE-2024-34412	high	8.5/10	WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability	May 6, 2024 2y ago