Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,971

All time

Critical · Active

11,208

CVSS ≥ 9.0

New · 14 days

3,092

Newly disclosed

Feed last synced

57 mins ago

Data freshness

Showing 15961–15990 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45647	medium	5.4/10	WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45645	medium	5.4/10	WordPress WP Open Street Map Plugin <= 1.25 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45643	medium	4.3/10	WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45642	medium	5.4/10	WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45641	medium	5.4/10	WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45639	medium	4.3/10	WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45638	medium	6.5/10	WordPress Eupago Gateway For Woocommerce Plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45656	medium	5.4/10	WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45655	medium	4.3/10	WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45654	medium	4.3/10	WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45653	medium	4.3/10	WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45651	medium	4.3/10	WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45650	medium	4.3/10	WordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45629	medium	5.4/10	WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45606	medium	4.3/10	WordPress Simple URLs Plugin <= 120 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45605	medium	4.3/10	WordPress Feed Statistics Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45274	medium	4.3/10	WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45273	medium	4.3/10	WordPress Stout Google Calendar Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45270	medium	4.3/10	WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45276	medium	5.4/10	WordPress Automated Editor Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45269	medium	5.4/10	WordPress Simple SEO Plugin <= 2.0.25 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45268	medium	4.3/10	WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45267	medium	4.3/10	WordPress IRivYou Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45109	medium	5.4/10	WordPress WhitePage Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45108	medium	4.3/10	WordPress Mailrelay Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45107	medium	4.3/10	WordPress GoodBarber Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-39999	medium	4.3/10	WordPress < 6.3.2 is vulnerable to Broken Access Control	Oct 13, 2023 2y ago
CVE-2023-38000	medium	6.5/10	Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block	Oct 13, 2023 2y ago
CVE-2023-45106	medium	4.3/10	WordPress Urvanov Syntax Highlighter Plugin <= 2.8.33 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45103	medium	4.3/10	WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago