Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,410

All time

Critical · Active

12,590

CVSS ≥ 9.0

New · 14 days

1,356

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16201–16230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45001	high	8.5/10	WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-41685	high	7.6/10	WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-40609	high	8.2/10	WordPress Contact form 7 Custom validation Plugin <= 1.1.3 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-27605	medium	5.5/10	WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-33924	high	7.6/10	WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-38382	—	—	WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-40207	high	7.6/10	WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-46849	high	7.6/10	WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-46860	high	8.5/10	WordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-45373	high	8.8/10	WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47432	medium	6.7/10	WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47430	medium	6.7/10	WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47420	medium	6.4/10	WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47428	medium	6.7/10	WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-40215	high	7.6/10	WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-35910	high	8.5/10	WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-38391	medium	6.7/10	WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32741	high	7.6/10	WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-36677	high	8.3/10	WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-36529	critical	9.9/10	WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-34179	high	7.6/10	WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25700	high	8.2/10	WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25800	high	8.1/10	WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25990	high	7.1/10	WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32508	high	7.6/10	WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32121	high	7.6/10	WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46818	high	8.2/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-47426	medium	6.0/10	WordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46859	high	8.5/10	WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-26015	high	7.1/10	WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago