Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,882

All time

Critical · Active

11,192

CVSS ≥ 9.0

New · 14 days

3,051

Newly disclosed

Feed last synced

39 mins ago

Data freshness

Showing 15511–15540 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-26542	medium	5.4/10	WordPress phpinfo() WP Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-26535	medium	5.4/10	WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-26532	medium	5.4/10	WordPress Social Auto Poster Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27457	medium	4.3/10	WordPress Add Expires Headers & Optimized Minify Plugin <= 2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27458	medium	4.3/10	WordPress WpStream – Live Streaming, Video on Demand, Pay Per View Plugin <= 4.4.10 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27461	medium	4.3/10	WordPress When Last Login Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27453	medium	5.4/10	WordPress LWS Tools Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27451	high	7.2/10	WordPress Instant Images Plugin <= 5.1.0.2 is vulnerable to Server Side Request Forgery (SSRF)	Nov 22, 2023 2y ago
CVE-2023-27442	medium	5.4/10	WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27444	medium	4.3/10	WordPress DecaLog Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27446	medium	4.3/10	WordPress DeepL Pro API translation Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-27633	medium	4.3/10	WordPress Customify Plugin <= 2.10.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-28747	medium	5.4/10	WordPress CBX Currency Converter Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-28749	medium	4.3/10	WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-47772	medium	6.5/10	WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)	Nov 20, 2023 2y ago
CVE-2023-28780	medium	6.5/10	WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-31075	medium	5.4/10	WordPress Easy Hide Login Plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-31089	medium	4.3/10	WordPress Video XML Sitemap Generator Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-32245	medium	5.4/10	WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)	Nov 18, 2023 2y ago
CVE-2023-32504	medium	5.4/10	WordPress Wise Chat Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-32514	medium	5.4/10	WordPress Google Site Verification plugin using Meta Tag Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-25985	medium	4.3/10	WordPress WordPress Tooltips Plugin <= 8.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-41129	medium	4.3/10	WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47243	medium	5.4/10	WordPress MSHOP MY SITE Plugin <= 1.1.6 is vulnerable to Broken Access Control	Nov 18, 2023 2y ago
CVE-2023-47519	medium	4.3/10	WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47531	medium	4.3/10	WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47551	medium	5.4/10	WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47552	medium	5.4/10	WordPress Image Hover Effects Plugin <= 5.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47553	medium	5.4/10	WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47556	medium	4.3/10	WordPress Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago