Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,069

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,765

Newly disclosed

Feed last synced

25 mins ago

Data freshness

Showing 15511–15540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-22674	medium	5.4/10	WordPress Dashicons + Custom Post Types Plugin <= 1.0.2 is vulnerable to Broken Access Control	Dec 21, 2023 2y ago
CVE-2023-28421	medium	5.3/10	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-2487	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-48288	high	7.5/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49162	medium	5.3/10	WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2023-49762	medium	5.3/10	WordPress AppMySite Plugin <= 3.11.0 is vulnerable to Sensitive Data Exposure	Dec 21, 2023 2y ago
CVE-2022-45377	medium	6.5/10	WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities	Dec 21, 2023 2y ago
CVE-2023-32242	critical	9.8/10	WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49778	critical	10.0/10	WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-49826	high	8.1/10	WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection	Dec 21, 2023 2y ago
CVE-2023-23970	critical	9.9/10	WordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-25970	critical	10.0/10	WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-28170	critical	9.1/10	WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29102	critical	9.1/10	WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-29384	critical	10.0/10	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31215	critical	9.9/10	WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-31231	critical	9.9/10	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-33318	critical	9.9/10	WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-34007	critical	9.9/10	WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-34385	critical	9.9/10	WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-40204	critical	9.1/10	WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-45603	critical	9.0/10	WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-46149	critical	9.9/10	WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-47784	high	8.4/10	WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2023-49814	critical	9.1/10	WordPress Symbiostock Lite Plugin <= 6.0.0 is vulnerable to Arbitrary File Upload	Dec 20, 2023 2y ago
CVE-2022-47597	medium	5.3/10	WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure	Dec 20, 2023 2y ago
CVE-2022-47599	medium	5.5/10	WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection	Dec 20, 2023 2y ago
CVE-2023-49752	critical	9.3/10	WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49166	high	7.6/10	WordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection	Dec 20, 2023 2y ago
CVE-2023-49161	high	7.6/10	WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection	Dec 20, 2023 2y ago