Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,971

All time

Critical · Active

11,208

CVSS ≥ 9.0

New · 14 days

3,090

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 15991–16020 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45102	medium	5.4/10	WordPress Blog Manager Light Plugin <= 1.20 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-41131	medium	4.3/10	WordPress Sp*tify Play Button for WordPress Plugin <= 2.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-32124	medium	4.3/10	WordPress Publish Confirm Message Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45068	medium	5.4/10	WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45063	medium	4.3/10	WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45060	medium	5.4/10	WordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45058	medium	4.3/10	WordPress Short URL Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45052	medium	4.3/10	WordPress WP Bing Map Pro Plugin < 5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45048	medium	5.4/10	WordPress Social proof testimonials and reviews by Repuso Plugin <= 5.00 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45011	medium	4.3/10	WordPress WP Power Stats Plugin <= 2.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-44998	medium	4.3/10	WordPress Category Meta Plugin <= 1.2.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45047	high	7.1/10	WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-44997	medium	5.4/10	WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 11, 2023 2y ago
CVE-2023-44996	medium	5.4/10	WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44995	medium	5.4/10	WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44994	medium	4.3/10	WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44476	medium	4.3/10	WordPress CopyRightPro Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44475	medium	5.4/10	WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44471	medium	4.3/10	WordPress Backend Localization Plugin <= 2.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44470	medium	5.4/10	WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44241	medium	4.3/10	WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44261	medium	4.3/10	WordPress Block Plugin Update Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44259	medium	4.3/10	WordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44257	medium	4.3/10	WordPress Mang Board WP Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41876	medium	4.3/10	WordPress WP Gallery Metabox Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41858	medium	4.3/10	WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41854	medium	5.4/10	WordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41853	medium	4.3/10	WordPress WP iCal Availability Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41852	medium	4.3/10	WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41851	medium	4.3/10	WordPress WP Custom Post Template Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago