Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,069

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,761

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 15751–15780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-48754	medium	5.4/10	WordPress Delete Post Revisions In WordPress Plugin <= 4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-5803	medium	4.3/10	WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-44143	medium	6.5/10	WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-45609	medium	6.5/10	WordPress Powr Pack Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-46086	high	7.1/10	WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-39921	medium	5.9/10	WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-25057	medium	5.3/10	WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-26533	medium	6.5/10	WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36507	medium	5.3/10	WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-36523	medium	5.3/10	WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37868	medium	6.5/10	WordPress Premium Addons PRO Plugin <= 2.9.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37890	medium	4.3/10	WordPress KB Support Plugin <= 1.5.88 is vulnerable to Broken Access Control	Nov 30, 2023 2y ago
CVE-2023-37972	medium	5.3/10	WordPress WooCommerce Product Stock Alert Plugin <= 2.0.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40211	high	7.5/10	WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40600	medium	5.3/10	WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-40662	medium	5.3/10	WordPress Cookies and Content Security Policy Plugin <= 2.15 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-41735	medium	5.3/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-44150	high	7.5/10	WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-45066	medium	5.9/10	WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-45834	medium	5.3/10	WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-46820	medium	5.3/10	WordPress Image Regenerate & Select Crop Plugin <= 7.3.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-48333	medium	6.5/10	WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-6136	medium	5.3/10	WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure	Nov 30, 2023 2y ago
CVE-2023-37867	low	3.7/10	WordPress Yet Another Stars Rating Plugin <= 3.3.8 is vulnerable to Race Condition	Nov 30, 2023 2y ago
CVE-2023-48742	high	7.6/10	WordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection	Nov 30, 2023 2y ago
CVE-2023-33333	high	7.1/10	WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)	Nov 30, 2023 2y ago
CVE-2023-34030	medium	6.5/10	WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-36682	high	7.1/10	WordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-36685	medium	4.3/10	WordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago
CVE-2023-47645	medium	4.3/10	WordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 30, 2023 2y ago