Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,195

All time

Critical · Active

12,582

CVSS ≥ 9.0

New · 14 days

1,261

Newly disclosed

Feed last synced

35 mins ago

Data freshness

Showing 14761–14790 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-30240	high	8.5/10	WordPress Calendarista plugin <= 15.5.7 - SQL Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30241	high	8.5/10	WordPress ProfileGrid – User Profiles, Memberships, Groups and Communities plugin <= 5.7.1 - Contributor+ SQL Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30242	high	8.5/10	WordPress Contact Form to Any API plugin <= 1.1.8 - Auth. SQL Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30243	high	8.5/10	WordPress Tooltips plugin < 9.4.5 - Auth. SQL Injection vulnerability	Mar 28, 2024 2y ago
CVE-2024-30244	high	8.5/10	WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability	Mar 28, 2024 2y ago
CVE-2024-30245	high	7.6/10	WordPress DecaLog plugin <= 3.9.0 - SQL Injection vulnerability	Mar 28, 2024 2y ago
CVE-2022-45847	medium	6.1/10	WordPress Countdown Widget plugin <= 3.1.9.1 - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)	Mar 27, 2024 2y ago
CVE-2024-30238	high	8.5/10	WordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerability	Mar 27, 2024 2y ago
CVE-2024-23510	medium	4.3/10	WordPress Don't Muck My Markup plugin <= 1.8 - Cross Site Request Forgery (CSRF) vulnerability	Mar 27, 2024 2y ago
CVE-2024-23515	medium	5.4/10	WordPress Cincopa video and media plugin <= 1.159 - Cross Site Request Forgery (CSRF) vulnerability	Mar 27, 2024 2y ago
CVE-2023-39311	high	7.1/10	WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability	Mar 27, 2024 2y ago
CVE-2023-44999	medium	5.4/10	WordPress WooCommerce Stripe Gateway plugin <= 7.6.0 - Cross Site Request Forgery (CSRF) vulnerability	Mar 27, 2024 2y ago
CVE-2023-34020	medium	4.7/10	WordPress Uncanny Toolkit for LearnDash plugin <= 3.6.4.3 - Open Redirection vulnerability	Mar 27, 2024 2y ago
CVE-2024-29773	high	7.1/10	WordPress BizPrint plugin <= 4.5.5 - CSRF to XSS vulnerability	Mar 27, 2024 2y ago
CVE-2024-29758	high	7.1/10	WordPress Co-marquage service-public.fr plugin <= 0.5.72 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29759	high	7.1/10	WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29760	high	7.1/10	WordPress Booster for WooCommerce plugin <= 7.1.8 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29761	medium	6.5/10	WordPress WP Post Disclaimer plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29762	medium	6.5/10	WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.1 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29763	high	7.1/10	WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29764	medium	6.5/10	WordPress Molongui plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29765	medium	6.5/10	WordPress Aparat for WordPress plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29766	medium	6.5/10	WordPress StreamWeasels Twitch Integration plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29767	high	7.1/10	WordPress Doneren met Mollie plugin <= 2.10.2 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29768	medium	5.9/10	WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29769	medium	6.5/10	WordPress Portfolio Gallery plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29777	high	7.1/10	WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29770	high	7.1/10	WordPress Pretty Links plugin <= 3.6.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29771	medium	6.5/10	WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29772	medium	6.5/10	WordPress MyBookTable Bookstore plugin <= 3.3.7 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago