Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,069

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,765

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15601–15630 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-44982	medium	5.3/10	WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure	Dec 19, 2023 2y ago
CVE-2023-46212	medium	6.3/10	WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control	Dec 18, 2023 2y ago
CVE-2023-46154	medium	6.6/10	WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection	Dec 18, 2023 2y ago
CVE-2023-47754	medium	4.3/10	WordPress Delete Duplicate Posts Plugin <= 4.8.9 is vulnerable to Broken Access Control	Dec 18, 2023 2y ago
CVE-2023-48751	medium	4.3/10	WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control	Dec 18, 2023 2y ago
CVE-2023-49819	high	7.5/10	WordPress Structured Content Plugin <= 1.5.3 is vulnerable to PHP Object Injection	Dec 18, 2023 2y ago
CVE-2022-45809	medium	5.3/10	WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition	Dec 18, 2023 2y ago
CVE-2023-47506	high	7.6/10	WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-47530	high	7.6/10	WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-47558	high	7.6/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-33331	high	8.5/10	WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-34168	high	7.6/10	WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL Injection	Dec 18, 2023 2y ago
CVE-2023-49821	medium	5.4/10	WordPress LiveChat Plugin <= 4.5.15 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49763	medium	4.3/10	WordPress CSprite Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49761	medium	5.4/10	WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49760	medium	5.4/10	WordPress WPsoonOnlinePage Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49759	medium	5.4/10	WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49163	medium	5.4/10	WordPress teachPress Plugin <= 9.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49155	medium	4.3/10	WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49153	medium	4.3/10	WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-49148	medium	5.4/10	WordPress Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates Plugin <= 3.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48781	medium	4.3/10	WordPress MkRapel Regiones y Ciudades de Chile para WC Plugin <= 4.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48778	medium	5.4/10	WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48773	medium	5.4/10	WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48772	medium	5.4/10	WordPress Prevent Landscape Rotation Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48769	medium	4.3/10	WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-48768	medium	4.3/10	WordPress Quantity Plus Minus Button for WooCommerce by CodeAstrology Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-5949	—	—	SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure	Dec 18, 2023 2y ago
CVE-2023-48766	medium	4.3/10	WordPress SVGator – Add Animated SVG Easily Plugin <= 1.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago
CVE-2023-46617	medium	5.4/10	WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)	Dec 18, 2023 2y ago