Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,077

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,755

Newly disclosed

Feed last synced

31 mins ago

Data freshness

Showing 16081–16110 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-47181	medium	4.3/10	WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 7, 2023 2y ago
CVE-2023-41798	medium	5.1/10	WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-41616	high	7.6/10	WordPress Export Users Data CSV Plugin <= 2.1 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-38702	medium	5.8/10	WordPress WP CSV Exporter Plugin <= 2.0 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-42882	medium	5.8/10	WordPress Simple CSV/XLS Exporter Plugin <= 1.5.8 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-44738	medium	5.8/10	WordPress Posts and Users Stats Plugin <= 1.1.3 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-45078	medium	5.9/10	WordPress User Blocker Plugin <= 1.5.5 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-45360	medium	4.7/10	WordPress Commenter Emails Plugin <= 2.6.1 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-45370	medium	6.1/10	WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-45348	medium	5.8/10	WordPress amr users Plugin <= 4.59.4 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-45810	medium	6.1/10	WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-46821	medium	5.8/10	WordPress Emails & Newsletters with Jackmail Plugin <= 1.2.22 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-46804	medium	5.8/10	WordPress Export Users Data Distinct Plugin <= 1.3 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-46803	medium	6.1/10	WordPress Noptin Plugin <= 1.9.5 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-46809	medium	6.1/10	WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-46801	medium	6.1/10	WordPress Site Reviews Plugin <= 6.2.0 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-46802	medium	6.1/10	WordPress Product Reviews Import Export for WooCommerce Plugin <= 1.4.8 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2023-36527	medium	4.7/10	WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-45357	medium	6.1/10	WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2023-22719	medium	4.7/10	WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2023-25983	—	—	WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-47442	medium	5.8/10	WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2022-45350	low	3.0/10	WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection	Nov 7, 2023 2y ago
CVE-2023-5703	medium	6.4/10	Gift Up Gift Cards for WordPress and WooCommerce <= 2.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Nov 7, 2023 2y ago
CVE-2023-5577	medium	6.4/10	Bitly's WordPress Plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Nov 7, 2023 2y ago
CVE-2023-47186	medium	4.3/10	WordPress Kadence WooCommerce Email Designer Plugin <= 1.5.11 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 6, 2023 2y ago
CVE-2023-5823	medium	4.3/10	WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 6, 2023 2y ago
CVE-2023-46781	medium	4.3/10	WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 6, 2023 2y ago
CVE-2023-46780	medium	4.3/10	WordPress Alter Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 6, 2023 2y ago
CVE-2023-46779	medium	5.4/10	WordPress EasyRecipe Plugin <= 3.5.3251 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 6, 2023 2y ago