Feed live

WordPress vulnerabilities - every known CVE affecting WordPress core, plugins, and themes

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every CVE that affects WordPress core, plugins, themes, and page builders. Scored and updated from the official NVD feed.

Total CVEs tracked

336,849

All time

Critical · Active

10,645

CVSS ≥ 9.0

New · 14 days

1,498

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1441–1470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-27417	critical	9.8/10	WordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27411	medium	5.4/10	WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27406	high	7.5/10	WordPress My Tickets plugin <= 2.1.0 - Sensitive Data Exposure vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27396	high	7.3/10	WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27390	high	8.8/10	WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27389	critical	9.8/10	WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27388	high	7.5/10	WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27386	high	7.5/10	WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27385	high	7.1/10	WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27384	critical	9.0/10	WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27383	high	8.1/10	WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27382	high	7.1/10	WordPress Metro theme <= 2.13 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27381	high	8.1/10	WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27379	high	8.8/10	WordPress NextScripts plugin <= 4.4.7 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27376	high	7.1/10	WordPress Claue - Clean, Minimal Elementor WooCommerce Theme theme <= 2.2.7 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27375	high	7.1/10	WordPress Gecko theme <= 1.9.8 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27374	high	7.5/10	WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27373	high	8.5/10	WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27370	high	7.5/10	WordPress Chaty plugin <= 3.5.1 - Sensitive Data Exposure vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27369	high	8.1/10	WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27367	high	7.1/10	WordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27363	high	7.1/10	WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27362	medium	6.5/10	WordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27361	high	7.5/10	WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27359	high	7.1/10	WordPress Awa Plugins plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27358	high	7.1/10	WordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27354	medium	6.5/10	WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27353	high	7.1/10	WordPress Grand News \| Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27352	high	7.1/10	WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-27348	high	7.1/10	WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago