Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,064

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,762

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15211–15240 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-51690	medium	6.5/10	WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51689	medium	6.5/10	WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51685	medium	5.9/10	WordPress WP Review Slider Plugin <= 12.7 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51684	medium	6.5/10	WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51534	medium	5.9/10	WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51677	medium	6.5/10	WordPress Schema & Structured Data for WP & AMP Plugin <= 1.23 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51536	medium	5.9/10	WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51674	medium	6.5/10	WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51669	medium	6.5/10	WordPress Product Code for WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51666	medium	6.5/10	WordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51548	medium	5.9/10	WordPress SlickNav Mobile Menu Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-51540	high	7.1/10	WordPress Custom 404 Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52118	medium	6.5/10	WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52175	medium	6.5/10	WordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52188	medium	6.5/10	WordPress Footer Putter Plugin <= 1.17 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52189	medium	6.5/10	WordPress Ideal Interactive Map Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52191	medium	6.5/10	WordPress Infogram Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52192	medium	6.5/10	WordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52193	medium	6.5/10	WordPress Page Builder: Live Composer Plugin <= 1.5.23 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52194	medium	6.5/10	WordPress oEmbed Gist Plugin <= 4.9.1 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2023-52195	medium	6.5/10	WordPress Posts to Page Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-21750	high	7.1/10	WordPress Shortcodes Finder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-22148	high	7.1/10	WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Feb 1, 2024 2y ago
CVE-2024-22146	medium	6.5/10	WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22153	medium	5.9/10	WordPress Stock Locations for WooCommerce Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22150	medium	6.5/10	WordPress Post Grid, Image Gallery & Portfolio for Elementor \| PowerFolio Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22158	medium	6.5/10	WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22159	high	7.1/10	WordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22160	high	7.1/10	WordPress Image Tag Manager Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago
CVE-2024-22161	medium	5.9/10	WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)	Jan 31, 2024 2y ago