Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,075

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,757

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16021–16050 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-31077	medium	4.3/10	WordPress Export WP Page to Static HTML/CSS Plugin <= 2.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31078	medium	4.3/10	WordPress WP BrowserUpdate Plugin <= 4.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 10, 2023 2y ago
CVE-2023-31086	medium	5.4/10	WordPress Simple Giveaways Plugin <= 2.46.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31088	medium	5.4/10	WordPress Floating Action Button Plugin <=1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31093	medium	4.3/10	WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-31235	medium	5.4/10	WordPress Participants Database Plugin <= 2.4.9 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32092	medium	4.3/10	WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32093	medium	5.4/10	WordPress TPG Redirect Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32125	medium	4.3/10	WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32500	medium	5.4/10	WordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32501	medium	4.3/10	WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32502	medium	4.3/10	WordPress Pro Mime Types Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32512	medium	4.3/10	WordPress ShortPixel Adaptive Images Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32579	medium	5.3/10	WordPress Forget About Shortcode Buttons Plugin <= 2.1.2 is vulnerable to Broken Access Control	Nov 9, 2023 2y ago
CVE-2023-32587	medium	5.4/10	WordPress WP Reactions Lite Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32592	medium	5.4/10	WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32594	medium	4.3/10	WordPress Hyphenator Plugin <= 5.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32602	medium	4.3/10	WordPress CALL ME NOW Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32739	medium	4.3/10	WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32744	medium	5.4/10	WordPress WooCommerce Product Recommendations Plugin < 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32745	medium	5.4/10	WordPress AutomateWoo Plugin <= 5.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-32794	medium	5.4/10	WordPress WooCommerce Product Add-ons Plugin <= 6.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34024	medium	4.3/10	WordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34025	medium	5.4/10	WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34031	medium	4.3/10	WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34033	medium	4.3/10	WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34169	medium	6.5/10	WordPress TS Webfonts for さくらのレンタルサーバ Plugin <= 3.1.2 is vulnerable to Broken Access Control	Nov 9, 2023 2y ago
CVE-2023-34171	medium	5.4/10	WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34177	medium	5.4/10	WordPress WP-Cache.com Plugin <= 1.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago
CVE-2023-34178	medium	5.4/10	WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 9, 2023 2y ago