Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,774

All time

Critical · Active

11,185

CVSS ≥ 9.0

New · 14 days

3,063

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15151–15180 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-50825	medium	6.5/10	WordPress iframe Shortcode Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50824	medium	6.5/10	WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000021 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50823	medium	6.5/10	WordPress CSS & JavaScript Toolbox Plugin <= 11.7 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50822	medium	6.5/10	WordPress Currency Converter Widget Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-50377	medium	5.9/10	WordPress Simple Counter Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47527	medium	5.9/10	WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-47525	medium	5.9/10	WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	Dec 21, 2023 2y ago
CVE-2023-22674	medium	5.4/10	WordPress Dashicons + Custom Post Types Plugin <= 1.0.2 is vulnerable to Broken Access Control	Dec 21, 2023 2y ago
CVE-2023-28421	medium	5.3/10	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-2487	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-48288	high	7.5/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49162	medium	5.3/10	WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49762	medium	5.3/10	WordPress AppMySite Plugin <= 3.11.0 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2022-45377	medium	6.5/10	WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities	Dec 21, 2023 2y ago
CVE-2023-32242	critical	9.8/10	WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49778	critical	10.0/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49826	high	8.1/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-23970	critical	9.9/10	WordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-25970	critical	10.0/10	WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-28170	critical	9.1/10	WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29102	critical	9.1/10	WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29384	critical	10.0/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31215	critical	9.9/10	WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31231	critical	9.9/10	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-33318	critical	9.9/10	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-34007	critical	9.9/10	WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-34385	critical	9.9/10	WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-40204	critical	9.1/10	WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-45603	critical	9.0/10	WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-46149	critical	9.9/10	WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago