Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,075

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,759

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15901–15930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-47672	medium	4.3/10	WordPress WP Category Post List Widget Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47685	medium	5.4/10	WordPress Preloader Matrix Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 18, 2023 2y ago
CVE-2023-47757	medium	4.3/10	WordPress AWeber Plugin <= 7.3.9 is vulnerable to Broken Access Control	Nov 17, 2023 2y ago
CVE-2023-47686	medium	4.3/10	WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-47687	medium	4.3/10	WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-47688	medium	4.3/10	WordPress Youtube SpeedLoad Plugin <= 0.6.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 16, 2023 2y ago
CVE-2023-32796	high	7.1/10	WordPress WooCommerce Product Enquiry Plugin <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-32957	medium	5.9/10	WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-34375	high	7.1/10	WordPress Seo By 10Web Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-39926	high	7.1/10	WordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-28621	high	7.1/10	WordPress Raise Mag Theme <= 1.0.7 and Wishful Blog theme <= 2.0.1 are vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47239	medium	6.5/10	WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47240	medium	6.5/10	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47242	medium	6.5/10	WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47245	medium	5.9/10	WordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47508	high	7.1/10	WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47509	high	7.1/10	WordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47511	medium	5.9/10	WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47512	high	7.1/10	WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47514	high	7.1/10	WordPress Star CloudPRNT for WooCommerce Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)	Nov 16, 2023 2y ago
CVE-2023-47517	high	7.1/10	WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47518	high	7.1/10	WordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47520	high	7.1/10	WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47522	high	7.1/10	WordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47524	medium	5.8/10	WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47528	medium	5.9/10	WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47532	medium	5.8/10	WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47533	medium	5.9/10	WordPress Countdown and CountUp, WooCommerce Sales Timer Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47544	high	7.1/10	WordPress Atarim Plugin <= 3.12 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago
CVE-2023-47545	medium	5.9/10	WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.4 is vulnerable to Cross Site Scripting (XSS)	Nov 14, 2023 2y ago