Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,077

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,750

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16291–16320 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-4811	—	—	WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting	Oct 16, 2023 2y ago
CVE-2023-3706	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure	Oct 16, 2023 2y ago
CVE-2023-3746	—	—	ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-5057	—	—	ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-3707	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure	Oct 16, 2023 2y ago
CVE-2023-5561	—	—	WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure	Oct 16, 2023 2y ago
CVE-2023-46087	medium	4.3/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-46066	medium	5.9/10	WordPress Mediabay Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44987	medium	5.9/10	WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44986	medium	5.9/10	WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44985	medium	6.5/10	WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44984	medium	6.5/10	WordPress bbp style pack Plugin <= 5.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44229	medium	5.9/10	WordPress Tiny Carousel Horizontal Slider Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-45836	medium	4.3/10	WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45831	medium	5.4/10	WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45763	medium	5.4/10	WordPress Taggbox Plugin <= 2.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45753	medium	4.3/10	WordPress which template file Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45752	medium	4.3/10	WordPress Post Gallery Plugin <= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45749	medium	4.3/10	WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45748	medium	4.3/10	WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45647	medium	5.4/10	WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45645	medium	5.4/10	WordPress WP Open Street Map Plugin <= 1.25 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45643	medium	4.3/10	WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45642	medium	5.4/10	WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45641	medium	5.4/10	WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45639	medium	4.3/10	WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45638	medium	6.5/10	WordPress Eupago Gateway For Woocommerce Plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45656	medium	5.4/10	WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45655	medium	4.3/10	WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45654	medium	4.3/10	WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago