Feed live

WordPress vulnerabilities - every known CVE affecting WordPress core, plugins, and themes

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every CVE that affects WordPress core, plugins, themes, and page builders. Scored and updated from the official NVD feed.

Total CVEs tracked

336,898

All time

Critical · Active

10,649

CVSS ≥ 9.0

New · 14 days

1,547

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1531–1560 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-22427	high	8.1/10	WordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22425	high	8.1/10	WordPress Sweet Jane theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22424	high	8.1/10	WordPress Shaha theme <= 1.1.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22423	high	8.1/10	WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22421	high	8.1/10	WordPress Quantum theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22420	high	8.1/10	WordPress Horizon theme <= 1.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22419	high	8.1/10	WordPress Honor theme <= 2.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22418	high	8.1/10	WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22417	critical	9.8/10	WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22416	high	8.1/10	WordPress FixTeam theme <= 1.5.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22415	high	8.1/10	WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22414	high	8.1/10	WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22413	high	8.1/10	WordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22412	high	8.1/10	WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22410	high	8.1/10	WordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22408	high	8.1/10	WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22405	high	8.1/10	WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22403	high	8.1/10	WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22399	high	8.1/10	WordPress Holmes theme <= 1.7 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22397	high	8.1/10	WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22395	high	8.1/10	WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22394	high	8.1/10	WordPress Evently theme <= 1.7 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22392	high	8.1/10	WordPress Cortex theme <= 1.9 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22390	critical	9.9/10	WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Remote Code Execution (RCE) vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22389	high	8.1/10	WordPress Cocco theme <= 2.0 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22387	high	8.1/10	WordPress Aviana theme <= 2.1 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2026-22385	high	8.1/10	WordPress Wolmart theme <= 1.9.6 - Local File Inclusion vulnerability	Mar 5, 2026 4mo ago
CVE-2025-69411	high	7.5/10	WordPress ionCube tester plus plugin <= 1.3 - Arbitrary File Download vulnerability	Mar 5, 2026 4mo ago
CVE-2025-69343	medium	6.5/10	WordPress Theater for WordPress plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 4mo ago
CVE-2025-69340	high	7.5/10	WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability	Mar 5, 2026 4mo ago