Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,971

All time

Critical · Active

11,208

CVSS ≥ 9.0

New · 14 days

3,086

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 16051–16080 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-41654	medium	5.4/10	WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-41650	medium	4.3/10	WordPress Remove/hide Author, Date, Category Like Entry-Meta Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-29235	medium	5.4/10	WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-28791	medium	4.3/10	WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-27615	medium	5.4/10	WordPress WP Super Minify Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-27448	medium	5.4/10	WordPress MakeStories (for Google Web Stories) Plugin <= 2.8.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-25033	medium	5.4/10	WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2022-47175	medium	4.3/10	WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-25480	medium	4.3/10	WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40671	medium	4.3/10	WordPress DX-auto-save-images Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40008	medium	4.3/10	WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40556	medium	4.3/10	WordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 2y ago
CVE-2023-40559	medium	4.3/10	WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-27433	medium	5.4/10	WordPress Make Paths Relative Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25025	medium	4.3/10	WordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25489	medium	4.3/10	WordPress Update Theme and Plugins from Zip File Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25788	medium	6.3/10	WordPress Saphali Woocommerce Lite Plugin <= 1.8.13 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-25980	medium	4.3/10	WordPress Optimize Database after Deleting Revisions Plugin <= 5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-37995	medium	4.3/10	WordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 2y ago
CVE-2023-5357	medium	6.4/10	Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Oct 4, 2023 2y ago
CVE-2023-40558	medium	5.4/10	WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-39158	medium	4.3/10	WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-41244	medium	4.3/10	WordPress Localize Remote Images Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-41693	medium	5.4/10	WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-27435	medium	6.3/10	WordPress HTTP Auth Plugin <= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-32091	medium	5.4/10	WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40009	medium	5.4/10	WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-39159	medium	4.3/10	WordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40212	medium	4.3/10	WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago
CVE-2023-40199	medium	5.4/10	WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 2y ago