Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,066

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,764

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15451–15480 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45751	critical	9.1/10	WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)	Dec 29, 2023 2y ago
CVE-2023-40606	critical	9.1/10	WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution	Dec 29, 2023 2y ago
CVE-2023-32095	critical	9.9/10	WordPress Rename Media Files Plugin <= 1.0.1 is vulnerable to Remote Code Execution (RCE)	Dec 29, 2023 2y ago
CVE-2023-25054	critical	10.0/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE)	Dec 29, 2023 2y ago
CVE-2023-22677	high	8.5/10	WordPress WP Booklet Plugin <= 2.1.8 is vulnerable to Remote Code Execution (RCE)	Dec 29, 2023 2y ago
CVE-2023-22676	low	3.1/10	WordPress Advanced Custom Fields: Image Crop Add-on Plugin <= 1.4.12 is vulnerable to Broken Access Control	Dec 29, 2023 2y ago
CVE-2022-36399	medium	5.3/10	WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure	Dec 28, 2023 2y ago
CVE-2023-50838	high	7.6/10	WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50839	critical	9.3/10	WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50840	high	8.5/10	WordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50841	high	8.5/10	WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50842	high	8.5/10	WordPress MF Gig Calendar Plugin <= 1.2.1 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50843	high	7.6/10	WordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50844	high	7.6/10	WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50845	high	7.6/10	WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50846	high	7.6/10	WordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50847	high	7.6/10	WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50848	high	7.6/10	WordPress 404 Solution Plugin <= 2.34.0 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50849	high	7.6/10	WordPress e2pdf Plugin <= 1.20.23 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50852	high	7.6/10	WordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50851	high	7.6/10	WordPress Simply Schedule Appointments Plugin < 1.6.6.1 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50853	high	7.6/10	WordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.75.0 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50854	high	7.6/10	WordPress Squirrly SEO - Advanced Pack Plugin <= 2.3.8 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50855	high	7.6/10	WordPress Pre* Party Resource Hints Plugin <= 1.8.18 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50856	high	7.6/10	WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-50857	high	7.6/10	WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection	Dec 28, 2023 2y ago
CVE-2023-27447	medium	5.3/10	WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure	Dec 28, 2023 2y ago
CVE-2023-32513	high	7.5/10	WordPress GiveWP Plugin <= 2.25.3 is vulnerable to PHP Object Injection	Dec 28, 2023 2y ago
CVE-2023-32795	high	8.2/10	WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to PHP Object Injection	Dec 28, 2023 2y ago
CVE-2023-36381	medium	6.6/10	WordPress Zippy Plugin <= 1.6.5 is vulnerable to PHP Object Injection	Dec 28, 2023 2y ago