Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,710

All time

Critical · Active

11,177

CVSS ≥ 9.0

New · 14 days

3,083

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 14641–14670 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-27960	high	7.1/10	WordPress Email Subscription Popup plugin <= 1.2.20 - Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-27959	high	7.1/10	WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-27958	high	7.1/10	WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 17, 2024 2y ago
CVE-2024-27957	critical	10.0/10	WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability	Mar 17, 2024 2y ago
CVE-2024-25903	medium	5.3/10	WordPress Frontend File Manager Plugin plugin <= 22.7 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-25591	medium	5.3/10	WordPress WP Editor plugin <=1.2.7 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-24867	medium	5.3/10	WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-25933	medium	5.3/10	WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability	Mar 17, 2024 2y ago
CVE-2024-24845	medium	5.3/10	WordPress Post Thumbnail Editor plugin <= 2.4.8 - Unauthenticated Sensitive Data Exposure vulnerability	Mar 16, 2024 2y ago
CVE-2024-23523	medium	6.5/10	WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability	Mar 16, 2024 2y ago
CVE-2024-27194	high	7.1/10	WordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerability	Mar 16, 2024 2y ago
CVE-2024-27195	high	7.1/10	WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability	Mar 16, 2024 2y ago
CVE-2024-27197	high	7.1/10	WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51474	high	8.8/10	WordPress TerraClassifieds plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability	Mar 16, 2024 2y ago
CVE-2023-51486	medium	5.4/10	WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51487	medium	5.4/10	WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.2.32 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51489	medium	5.4/10	WordPress Crowdsignal Polls & Ratings plugin <= 3.0.11 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51491	medium	5.4/10	WordPress Depicter Slider plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51510	medium	4.3/10	WordPress Export Media URLs plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51512	medium	4.3/10	WordPress Product Table by WBW plugin <= 1.8.6 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51521	medium	5.4/10	WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51407	medium	4.3/10	WordPress Split Test For Elementor plugin <= 1.6.9 - Cross Site Request Forgery (CSRF) vulnerability	Mar 16, 2024 2y ago
CVE-2023-51522	medium	4.3/10	WordPress Paid Membership Subscriptions plugin <= 2.10.4 - Cross Site Request Forgery (CSRF) vulnerability	Mar 15, 2024 2y ago
CVE-2023-51369	medium	4.3/10	WordPress Customize My Account for WooCommerce plugin <= 1.8.3 - Cross Site Request Forgery (CSRF) vulnerability	Mar 15, 2024 2y ago
CVE-2023-50898	medium	5.4/10	WordPress Image Optimizer, Resizer and CDN – Sirv plugin <= 7.1.2 - Broken Access Control vulnerability	Mar 15, 2024 2y ago
CVE-2023-50886	medium	4.3/10	WordPress Legal Pages plugin <= 1.3.7 - CSRF + Broken Access Control vulnerability	Mar 15, 2024 2y ago
CVE-2023-51525	medium	4.3/10	WordPress WP Simple Booking Calendar plugin <= 2.0.8.4 - Cross Site Request Forgery (CSRF) vulnerability	Mar 15, 2024 2y ago
CVE-2023-50861	medium	4.3/10	WordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability	Mar 15, 2024 2y ago
CVE-2024-25597	high	7.1/10	WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago
CVE-2024-25596	medium	5.9/10	WordPress Doofinder for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability	Mar 15, 2024 2y ago