Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,077

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,755

Newly disclosed

Feed last synced

57 mins ago

Data freshness

Showing 16141–16170 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-46849	high	7.6/10	WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-46860	high	8.5/10	WordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-45373	high	8.8/10	WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47432	medium	6.7/10	WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47430	medium	6.7/10	WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47420	medium	6.4/10	WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47428	medium	6.7/10	WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-40215	high	7.6/10	WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-35910	high	8.5/10	WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-38391	medium	6.7/10	WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32741	high	7.6/10	WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-36677	high	8.3/10	WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-36529	critical	9.9/10	WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-34179	high	7.6/10	WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25700	high	8.2/10	WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25800	high	8.1/10	WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25990	high	7.1/10	WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32508	high	7.6/10	WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32121	high	7.6/10	WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46818	high	8.2/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-47426	medium	6.0/10	WordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46859	high	8.5/10	WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-26015	high	7.1/10	WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46808	high	8.2/10	WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-47445	high	8.2/10	WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25960	critical	10.0/10	WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-45805	high	8.2/10	WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-47588	medium	6.7/10	WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-34383	high	8.5/10	WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-41652	high	8.2/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection	Nov 3, 2023 2y ago