Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,077

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,750

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16321–16350 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45653	medium	4.3/10	WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45651	medium	4.3/10	WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45650	medium	4.3/10	WordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45629	medium	5.4/10	WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45606	medium	4.3/10	WordPress Simple URLs Plugin <= 120 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45605	medium	4.3/10	WordPress Feed Statistics Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45274	medium	4.3/10	WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45273	medium	4.3/10	WordPress Stout Google Calendar Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45270	medium	4.3/10	WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45276	medium	5.4/10	WordPress Automated Editor Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45269	medium	5.4/10	WordPress Simple SEO Plugin <= 2.0.25 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45268	medium	4.3/10	WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45267	medium	4.3/10	WordPress IRivYou Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45109	medium	5.4/10	WordPress WhitePage Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45108	medium	4.3/10	WordPress Mailrelay Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-45107	medium	4.3/10	WordPress GoodBarber Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 13, 2023 2y ago
CVE-2023-39999	medium	4.3/10	WordPress < 6.3.2 is vulnerable to Broken Access Control	Oct 13, 2023 2y ago
CVE-2023-38000	medium	6.5/10	Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block	Oct 13, 2023 2y ago
CVE-2023-45106	medium	4.3/10	WordPress Urvanov Syntax Highlighter Plugin <= 2.8.33 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45103	medium	4.3/10	WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45102	medium	5.4/10	WordPress Blog Manager Light Plugin <= 1.20 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-41131	medium	4.3/10	WordPress Sp*tify Play Button for WordPress Plugin <= 2.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-32124	medium	4.3/10	WordPress Publish Confirm Message Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45068	medium	5.4/10	WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45063	medium	4.3/10	WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45060	medium	5.4/10	WordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45058	medium	4.3/10	WordPress Short URL Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45052	medium	4.3/10	WordPress WP Bing Map Pro Plugin < 5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45048	medium	5.4/10	WordPress Social proof testimonials and reviews by Repuso Plugin <= 5.00 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45011	medium	4.3/10	WordPress WP Power Stats Plugin <= 2.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago