Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,165

All time

Critical · Active

12,577

CVSS ≥ 9.0

New · 14 days

1,446

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 14461–14490 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-31264	medium	4.3/10	WordPress Post Views Counter plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31265	low	3.7/10	WordPress Sumo plugin <= 1.34 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31268	medium	4.3/10	WordPress AppPresser plugin <= 4.3.0 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31269	medium	4.3/10	WordPress Easy Google Maps plugin <= 1.11.11 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31271	medium	4.3/10	WordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerability	Apr 12, 2024 2y ago
CVE-2024-31272	medium	6.3/10	WordPress ARForms Form Builder plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31279	medium	5.4/10	WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31289	medium	4.3/10	WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31293	medium	4.3/10	WordPress Easy Digital Downloads plugin <= 3.2.6 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31301	medium	5.4/10	WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31303	medium	4.3/10	WordPress Sign-up Sheets plugin <= 2.2.11.1 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31305	medium	4.3/10	WordPress Transcoder plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31354	medium	4.3/10	WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31360	medium	4.3/10	WordPress Benchmark Email Lite plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31362	medium	4.3/10	WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31363	medium	4.3/10	WordPress LifterLMS plugin <= 7.5.0 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31364	medium	4.3/10	WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31371	medium	4.3/10	WordPress WP Event Aggregator plugin <= 1.7.6 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-31372	medium	4.3/10	WordPress No-Bot Registration plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-32105	medium	4.3/10	WordPress ELEX WooCommerce Dynamic Pricing and Discounts plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Apr 11, 2024 2y ago
CVE-2024-32106	medium	4.3/10	WordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerability	Apr 11, 2024 2y ago
CVE-2024-32107	medium	4.3/10	WordPress Finale Lite plugin <= 2.18.0 - Cross Site Request Forgery (CSRF) vulnerability	Apr 11, 2024 2y ago
CVE-2024-32108	medium	4.3/10	WordPress Convert Post Types plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability	Apr 11, 2024 2y ago
CVE-2024-32109	medium	4.3/10	WordPress WP Matterport Shortcode plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) vulnerability	Apr 11, 2024 2y ago
CVE-2024-32083	medium	5.9/10	WordPress Easy Logo plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability	Apr 11, 2024 2y ago
CVE-2024-31361	medium	5.9/10	WordPress bunny.net plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	Apr 11, 2024 2y ago
CVE-2024-31387	medium	5.9/10	WordPress Popup Likebox plugin <= 3.7.2 - Cross-Site Scripting (XSS) vulnerability	Apr 11, 2024 2y ago
CVE-2024-31925	medium	5.9/10	WordPress F4 Improvements plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability	Apr 11, 2024 2y ago
CVE-2024-31926	medium	5.9/10	WordPress Advanced Cron Manager – debug & control plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability	Apr 11, 2024 2y ago
CVE-2024-31927	medium	5.9/10	WordPress WP Login and Logout Redirect plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability	Apr 11, 2024 2y ago