Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,077

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,755

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16201–16230 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-46094	high	7.1/10	WordPress Conversios.io Plugin <= 6.5.3 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-32116	medium	5.9/10	WordPress Custom post types Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46081	high	7.1/10	WordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46077	high	7.1/10	WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46076	high	7.1/10	WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46075	high	7.1/10	WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-30492	medium	6.5/10	WordPress Minimum Purchase for WooCommerce Plugin <= 2.0.0.1 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46074	medium	5.8/10	WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-5802	medium	4.3/10	WordPress WP Knowledgebase Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 26, 2023 2y ago
CVE-2023-46072	high	7.1/10	WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Scripting (XSS)	Oct 26, 2023 2y ago
CVE-2023-46071	high	7.1/10	WordPress Protección de Datos RGPD Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-46070	high	7.1/10	WordPress EG-Attachments Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-46069	medium	6.5/10	WordPress Ajax Archive Calendar Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-46068	medium	5.9/10	WordPress Maileon Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45837	high	7.1/10	WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45835	high	7.1/10	WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45833	medium	5.9/10	WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45829	medium	6.5/10	WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45772	high	7.1/10	WordPress Proofreading Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45770	high	7.1/10	WordPress Fast WP Speed Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45832	medium	5.9/10	WordPress WP GoToWebinar Plugin <= 14.45 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45769	high	7.1/10	WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45768	medium	5.9/10	WordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45767	medium	5.9/10	WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45764	medium	5.9/10	WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45761	high	7.1/10	WordPress Sendle Shipping Plugin <= 5.13 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-39924	medium	5.9/10	WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45759	high	7.1/10	WordPress Peter’s Custom Anti-Spam Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45758	medium	5.9/10	WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago
CVE-2023-45756	high	7.1/10	WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)	Oct 24, 2023 2y ago