Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,792

All time

Critical · Active

11,186

CVSS ≥ 9.0

New · 14 days

3,079

Newly disclosed

Feed last synced

55 mins ago

Data freshness

Showing 15181–15210 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-47784	high	8.4/10	WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-49814	critical	9.1/10	WordPress Symbiostock Lite Plugin <= 6.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2022-47597	medium	5.3/10	WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure	Dec 20, 2023 2y ago
CVE-2022-47599	medium	5.5/10	WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49752	critical	9.3/10	WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49166	high	7.6/10	WordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49161	high	7.6/10	WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-26525	high	7.1/10	WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-28491	medium	6.7/10	WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-28788	high	7.1/10	WordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-29096	high	8.5/10	WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-29432	high	8.2/10	WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30495	high	8.5/10	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30750	high	8.5/10	WordPress CM Pop-Up banners Plugin <= 1.5.10 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-30872	high	7.6/10	WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-31092	medium	5.5/10	WordPress Easy Bet Plugin <= 1.0.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32128	medium	5.5/10	WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations Plugin <= 2.2.7 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32743	high	7.6/10	WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-33209	high	8.5/10	WordPress SEO Change Monitor Plugin <= 1.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-33330	high	8.5/10	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49825	high	8.5/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49776	critical	9.3/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49773	critical	10.0/10	WordPress BCorp Shortcodes Plugin <= 0.23 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49772	critical	10.0/10	WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-35914	high	7.5/10	WordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-35915	high	7.6/10	WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-35916	high	7.5/10	WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)	Dec 20, 2023 2y ago
CVE-2023-40010	critical	9.3/10	WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin <= 1.3.4.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-32590	critical	9.3/10	WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-47852	high	8.5/10	WordPress Link Whisper Free Plugin <= 0.6.5 is vulnerable to SQL Injection	Dec 20, 2023 2y ago