Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,743

All time

Critical · Active

11,182

CVSS ≥ 9.0

New · 14 days

3,050

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 14881–14910 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-22146	medium	6.5/10	WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22153	medium	5.9/10	WordPress Stock Locations for WooCommerce Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22150	medium	6.5/10	WordPress Post Grid, Image Gallery & Portfolio for Elementor \| PowerFolio Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22158	medium	6.5/10	WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22159	high	7.1/10	WordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22160	high	7.1/10	WordPress Image Tag Manager Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22161	medium	5.9/10	WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22162	high	7.1/10	WordPress WPZOOM Shortcodes Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22163	high	7.1/10	WordPress Shield Security Plugin <= 18.5.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22282	high	7.1/10	WordPress SimpleMap Store Locator Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22286	high	7.1/10	WordPress BA Plus Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22289	high	7.1/10	WordPress Post views Stats plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability	Jan 31, 2024 2y ago
CVE-2024-22292	medium	6.5/10	WordPress WP To Do Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22293	high	7.1/10	WordPress BP Profile Search Plugin <= 5.5 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22295	medium	5.9/10	WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22297	medium	6.5/10	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22302	medium	6.5/10	WordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22306	medium	5.9/10	WordPress Mang Board WP Plugin <= 1.7.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22307	high	7.1/10	WordPress WP-Lister Lite for eBay plugin <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability	Jan 31, 2024 2y ago
CVE-2024-22310	medium	6.5/10	WordPress Formzu WP Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23502	medium	6.5/10	WordPress Posts List Designer by Category – List Category Posts Or Recent Posts Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23505	medium	6.5/10	WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-23508	high	7.1/10	WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22136	medium	4.3/10	WordPress Droit Elementor Addons Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22140	high	8.8/10	WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22143	medium	5.4/10	WordPress WP Spell Check Plugin <= 9.17 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22285	medium	5.4/10	WordPress Frontpage Manager Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22291	medium	4.3/10	WordPress Browser Theme Color Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22304	medium	5.4/10	WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago
CVE-2024-22287	high	7.1/10	WordPress Better Anchor Links Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jan 31, 2024 2y ago