Feed live

WordPress vulnerabilities - every known CVE affecting WordPress core, plugins, and themes

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every CVE that affects WordPress core, plugins, themes, and page builders. Scored and updated from the official NVD feed.

Total CVEs tracked

336,897

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,546

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1501–1530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-22473	high	8.8/10	WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22471	high	8.8/10	WordPress Secudeal Payments for Ecommerce plugin <= 1.1 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22467	high	7.1/10	WordPress DeepDigital theme <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22465	high	7.1/10	WordPress BuddyApp theme <= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22460	high	8.6/10	WordPress FormGent plugin <= 1.7.0 - Arbitrary File Deletion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22459	medium	6.5/10	WordPress WordPress CTA plugin <= 2.1.2 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22457	high	8.1/10	WordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22456	high	8.1/10	WordPress Askka theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22455	high	7.1/10	WordPress Thebe theme <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22454	critical	9.8/10	WordPress Solaris theme <= 2.5 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22453	critical	9.8/10	WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22452	high	8.1/10	WordPress Hoverex theme <= 1.5.10 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22451	critical	9.8/10	WordPress Handyman theme <= 1.4.7 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22449	high	8.1/10	WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22446	high	8.1/10	WordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22443	high	8.1/10	WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22442	high	8.1/10	WordPress Tribe theme <= 1.7.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22441	high	8.1/10	WordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22440	high	7.1/10	WordPress Thecs theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22439	high	8.1/10	WordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22438	high	7.1/10	WordPress TheBi theme <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22437	high	8.1/10	WordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22436	high	8.1/10	WordPress Helvig theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22435	high	8.1/10	WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22434	high	8.1/10	WordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22433	high	8.1/10	WordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22432	high	8.1/10	WordPress Woopy theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22431	high	8.1/10	WordPress Wabi-Sabi theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22429	high	8.1/10	WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22428	high	8.1/10	WordPress Tooth Fairy theme <= 1.16 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago