Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,823

All time

Critical · Active

11,186

CVSS ≥ 9.0

New · 14 days

3,062

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15331–15360 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-49152	medium	6.5/10	WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49151	medium	6.5/10	WordPress Google Calendar Events Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49150	medium	6.5/10	WordPress Crypto Converter Widget Plugin <= 1.8.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49149	medium	6.5/10	WordPress Currency Converter Calculator Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48780	medium	6.5/10	WordPress WP Catalogue Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48771	high	7.1/10	WordPress File Gallery Plugin <= 1.8.5.4 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48770	medium	6.5/10	WordPress Aparat Plugin <= 1.7.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48767	high	7.1/10	WordPress MyTube PlayList Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-48756	high	7.1/10	WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49860	medium	6.5/10	WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49842	medium	5.9/10	WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49841	medium	5.9/10	WordPress Optin Forms Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49820	medium	6.5/10	WordPress Structured Content Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49813	high	7.1/10	WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49771	high	7.1/10	WordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49770	medium	5.9/10	WordPress Smart External Link Click Monitor [Link Log] Plugin <= 5.0.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49766	high	7.1/10	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49195	medium	5.9/10	WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49173	medium	6.5/10	WordPress 10to8 Online Appointment Booking System Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49172	high	7.1/10	WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49171	high	7.1/10	WordPress Innovs HR Plugin <= 1.0.3.4 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49168	medium	6.5/10	WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2022-45365	high	7.1/10	WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49739	high	7.1/10	WordPress PowerPack Pro for Elementor plugin <= 2.9.23 - Reflected Cross Site Scripting (XSS) vulnerability	Dec 14, 2023 2y ago
CVE-2023-49740	high	7.1/10	WordPress Seraphinite Accelerator Plugin <= 2.20.28 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49743	medium	5.9/10	WordPress Dashboard Widgets Suite Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49745	medium	6.5/10	WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49827	high	7.1/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49828	medium	6.5/10	WordPress WooCommerce Payments Plugin <= 6.4.2 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago
CVE-2023-49833	medium	6.5/10	WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)	Dec 14, 2023 2y ago