Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,903

All time

Critical · Active

11,196

CVSS ≥ 9.0

New · 14 days

3,063

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 15841–15870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-32738	medium	5.9/10	WordPress Eonet Manual User Approve Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46200	medium	5.9/10	WordPress Smart App Banner Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46199	medium	5.9/10	WordPress Triberr Plugin <= 4.1.1 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46194	medium	5.8/10	WordPress Archivist – Custom Archive Templates Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46192	medium	5.9/10	WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46153	high	7.1/10	WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46093	medium	5.9/10	WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46091	medium	5.9/10	WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	Oct 27, 2023 2y ago
CVE-2023-46090	high	7.1/10	WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46088	medium	5.9/10	WordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46094	high	7.1/10	WordPress Conversios.io Plugin <= 6.5.3 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-32116	medium	5.9/10	WordPress Custom post types Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46081	high	7.1/10	WordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46077	high	7.1/10	WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46076	high	7.1/10	WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46075	high	7.1/10	WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-30492	medium	6.5/10	WordPress Minimum Purchase for WooCommerce Plugin <= 2.0.0.1 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46074	medium	5.8/10	WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-5802	medium	4.3/10	WordPress WP Knowledgebase Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 26, 2023 2y ago
CVE-2023-46072	high	7.1/10	WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46071	high	7.1/10	WordPress Protección de Datos RGPD Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-46070	high	7.1/10	WordPress EG-Attachments Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-46069	medium	6.5/10	WordPress Ajax Archive Calendar Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-46068	medium	5.9/10	WordPress Maileon Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45837	high	7.1/10	WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45835	high	7.1/10	WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45833	medium	5.9/10	WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45829	medium	6.5/10	WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45772	high	7.1/10	WordPress Proofreading Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45770	high	7.1/10	WordPress Fast WP Speed Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago