Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,975

All time

Critical · Active

11,208

CVSS ≥ 9.0

New · 14 days

3,084

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 16141–16170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-41657	medium	5.9/10	WordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41655	medium	5.9/10	WordPress authLdap Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)	Sep 29, 2023 2y ago
CVE-2023-41653	high	7.1/10	WordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41242	medium	5.9/10	WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41241	medium	5.9/10	WordPress SureCart Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41238	high	7.1/10	WordPress Social Media & Share Icons Plugin <= 2.8.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41237	high	7.1/10	WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41236	high	7.1/10	WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-41235	high	7.1/10	WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40333	high	7.1/10	WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-30493	high	7.1/10	WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-30472	high	7.1/10	WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-30471	high	7.1/10	WordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27622	medium	5.9/10	WordPress GuruWalk Affiliates Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27628	medium	6.5/10	WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-25483	medium	5.9/10	WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40677	medium	5.9/10	WordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40675	medium	5.9/10	WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40669	medium	6.5/10	WordPress Collapse-O-Matic Plugin <= 1.8.5.5 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40676	medium	5.9/10	WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40667	high	7.1/10	WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40668	medium	5.9/10	WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40665	medium	5.9/10	WordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40664	high	7.1/10	WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40663	high	7.1/10	WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40330	high	7.1/10	WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40605	medium	6.5/10	WordPress Typing Effect Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27616	high	7.1/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-27617	medium	5.9/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago
CVE-2023-40604	medium	5.9/10	WordPress Cookies by JM Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 2y ago