Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,882

All time

Critical · Active

11,192

CVSS ≥ 9.0

New · 14 days

3,051

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15541–15570 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-47644	medium	5.4/10	WordPress ProfileGrid Plugin <= 5.6.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47649	medium	5.4/10	WordPress Best Restaurant Menu by PriceListo Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47650	medium	6.5/10	WordPress Add Local Avatar Plugin <= 12.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47651	medium	4.3/10	WordPress WP Links Page Plugin <= 4.9.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47655	medium	5.4/10	WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47664	medium	6.5/10	WordPress Plainview Protect Passwords Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47666	medium	4.3/10	WordPress Code Snippets Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47667	medium	4.3/10	WordPress WP Full Stripe Free plugin <= 7.0.16 - Cross Site Request Forgery (CSRF) vulnerability on every Setting Save	Nov 18, 2023 2y ago
CVE-2023-47670	medium	4.3/10	WordPress Korea SNS Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47671	medium	5.4/10	WordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47672	medium	4.3/10	WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47685	medium	5.4/10	WordPress Preloader Matrix Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47757	medium	4.3/10	WordPress AWeber Plugin <= 7.3.9 is vulnerable to Broken Access Control	Nov 17, 2023 2y ago
CVE-2023-47686	medium	4.3/10	WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-47687	medium	4.3/10	WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-47688	medium	4.3/10	WordPress Youtube SpeedLoad Plugin <= 0.6.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-32796	high	7.1/10	WordPress WooCommerce Product Enquiry Plugin <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-32957	medium	5.9/10	WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-34375	high	7.1/10	WordPress Seo By 10Web Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-39926	high	7.1/10	WordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-28621	high	7.1/10	WordPress Raise Mag Theme <= 1.0.7 and Wishful Blog theme <= 2.0.1 are vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47239	medium	6.5/10	WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47240	medium	6.5/10	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47242	medium	6.5/10	WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47245	medium	5.9/10	WordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47508	high	7.1/10	WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47509	high	7.1/10	WordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47511	medium	5.9/10	WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47512	high	7.1/10	WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47514	high	7.1/10	WordPress Star CloudPRNT for WooCommerce Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago