Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,839

All time

Critical · Active

11,190

CVSS ≥ 9.0

New · 14 days

3,028

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15391–15420 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-48317	medium	6.5/10	WordPress Display Custom Post Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48320	medium	5.9/10	WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48321	medium	6.5/10	WordPress Accelerated Mobile Pages Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48746	high	7.1/10	WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48748	high	7.1/10	WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48752	high	7.1/10	WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-48749	medium	6.5/10	WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-47875	medium	5.4/10	WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-48278	high	7.1/10	WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to XSS	Nov 30, 2023 2y ago
CVE-2023-48328	medium	4.3/10	WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-48754	medium	5.4/10	WordPress Delete Post Revisions In WordPress Plugin <= 4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-5803	medium	4.3/10	WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-44143	medium	6.5/10	WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-45609	medium	6.5/10	WordPress Powr Pack Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-46086	high	7.1/10	WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-39921	medium	5.9/10	WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-25057	medium	5.3/10	WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-26533	medium	6.5/10	WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36507	medium	5.3/10	WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36523	medium	5.3/10	WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37868	medium	6.5/10	WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37890	medium	4.3/10	WordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control	Nov 30, 2023 2y ago
CVE-2023-37972	medium	5.3/10	WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40211	high	7.5/10	WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40600	medium	5.3/10	WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40662	medium	5.3/10	WordPress Cookies and Content Security Policy Plugin <= 2.15 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-41735	medium	5.3/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-44150	high	7.5/10	WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-45066	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-45834	medium	5.3/10	WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago