Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,743

All time

Critical · Active

11,182

CVSS ≥ 9.0

New · 14 days

3,055

Newly disclosed

Feed last synced

28 mins ago

Data freshness

Showing 14851–14880 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-51514	medium	6.5/10	WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51520	medium	6.5/10	WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51695	medium	5.9/10	WordPress Everest Forms Plugin <= 2.0.4.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51694	medium	6.5/10	WordPress Embed Privacy Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51693	medium	6.5/10	WordPress Themify Icons Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51532	medium	6.5/10	WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51691	medium	5.9/10	WordPress wpDiscuz Plugin <= 7.6.12 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51690	medium	6.5/10	WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51689	medium	6.5/10	WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51685	medium	5.9/10	WordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51684	medium	6.5/10	WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51534	medium	5.9/10	WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51677	medium	6.5/10	WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51536	medium	5.9/10	WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51674	medium	6.5/10	WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51669	medium	6.5/10	WordPress Product Code for WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51666	medium	6.5/10	WordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51548	medium	5.9/10	WordPress SlickNav Mobile Menu Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51540	high	7.1/10	WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52118	medium	6.5/10	WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52175	medium	6.5/10	WordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52188	medium	6.5/10	WordPress Footer Putter Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52189	medium	6.5/10	WordPress Ideal Interactive Map Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52191	medium	6.5/10	WordPress Infogram Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52192	medium	6.5/10	WordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52193	medium	6.5/10	WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52194	medium	6.5/10	WordPress oEmbed Gist Plugin <= 4.9.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52195	medium	6.5/10	WordPress Posts to Page Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-21750	high	7.1/10	WordPress Shortcodes Finder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-22148	high	7.1/10	WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago