Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,889

All time

Critical · Active

11,192

CVSS ≥ 9.0

New · 14 days

3,056

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 15661–15690 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-28694	medium	5.4/10	WordPress Wbcom Designs – BuddyPress Activity Social Share Plugin <= 3.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28696	medium	4.3/10	WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28930	medium	4.3/10	WordPress Mobile Banner Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-28987	medium	4.3/10	WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-29238	medium	4.3/10	WordPress Whydonate – FREE Donate button Plugin <= 3.12.15 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-29425	medium	5.4/10	WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 12, 2023 2y ago
CVE-2023-29426	medium	4.3/10	WordPress Spreadshop Plugin Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-29428	medium	5.3/10	WordPress Superb Social Media Share Buttons and Follow Buttons Plugin <= 1.1.3 is vulnerable to Broken Access Control	Nov 10, 2023 2y ago
CVE-2023-29440	medium	4.3/10	WordPress Simple Job Board Plugin <= 2.10.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-30478	medium	5.4/10	WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31077	medium	4.3/10	WordPress Export WP Page to Static HTML/CSS Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31078	medium	4.3/10	WordPress WP BrowserUpdate Plugin <= 4.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31086	medium	5.4/10	WordPress Simple Giveaways Plugin <= 2.46.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31088	medium	5.4/10	WordPress Floating Action Button Plugin <=1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31093	medium	4.3/10	WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31235	medium	5.4/10	WordPress Participants Database Plugin <= 2.4.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32092	medium	4.3/10	WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32093	medium	5.4/10	WordPress TPG Redirect Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32125	medium	4.3/10	WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32500	medium	5.4/10	WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32501	medium	4.3/10	WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32502	medium	4.3/10	WordPress Pro Mime Types Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32512	medium	4.3/10	WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32579	medium	5.3/10	WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control	Nov 9, 2023 2y ago
CVE-2023-32587	medium	5.4/10	WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32592	medium	5.4/10	WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32594	medium	4.3/10	WordPress Hyphenator Plugin <= 5.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32602	medium	4.3/10	WordPress CALL ME NOW Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32739	medium	4.3/10	WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32744	medium	5.4/10	WordPress WooCommerce Product Recommendations Plugin < 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago