Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,978

All time

Critical · Active

11,209

CVSS ≥ 9.0

New · 14 days

3,075

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 16321–16350 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-31228	medium	5.9/10	WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)	Aug 18, 2023 2y ago
CVE-2023-31094	high	7.1/10	WordPress Stock Sync for WooCommerce Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)	Aug 18, 2023 2y ago
CVE-2023-30875	medium	5.9/10	WordPress Logo Scheduler Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)	Aug 18, 2023 2y ago
CVE-2023-28690	medium	5.9/10	WordPress WP BrowserUpdate Plugin <= 4.5 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-28783	medium	5.9/10	WordPress Woocommerce Tip/Donation Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-28693	high	7.1/10	WordPress Advanced Youtube Channel Pagination Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-31072	high	7.1/10	WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-31079	medium	6.5/10	WordPress Tippy Plugin <= 6.2.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-31091	medium	5.9/10	WordPress Dynamically Register Sidebars Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-26530	high	7.1/10	WordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-31074	high	7.1/10	WordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-31076	high	7.1/10	WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-31071	high	7.1/10	WordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-30877	high	7.1/10	WordPress XML for Google Merchant Center Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-30874	medium	5.9/10	WordPress GPS Plotter Plugin <= 5.1.4 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-30876	medium	5.9/10	WordPress Dave's WordPress Live Search Plugin <= 4.8.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-28533	medium	5.9/10	WordPress Cab Grid Plugin <= 1.5.15 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-28622	medium	5.9/10	WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 2y ago
CVE-2023-30871	high	7.1/10	WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 2y ago
CVE-2023-30779	high	7.1/10	WordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 2y ago
CVE-2023-30784	medium	6.5/10	WordPress Kaya QR Code Generator Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 2y ago
CVE-2023-30473	high	7.1/10	WordPress YML for Yandex Market Plugin <= 3.10.7 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 2y ago
CVE-2023-30785	high	7.1/10	WordPress Video Grid Plugin <= 1.21 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 2y ago
CVE-2023-30782	high	7.1/10	WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 2y ago
CVE-2023-30786	medium	5.9/10	WordPress Captcha Them All Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 2y ago
CVE-2023-30498	high	7.1/10	WordPress Vimeotheque Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)	Aug 15, 2023 2y ago
CVE-2023-30778	medium	5.5/10	WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 15, 2023 2y ago
CVE-2023-30747	high	7.1/10	WordPress WooCommerce Easy Duplicate Product Plugin <= 0.3.0.0 is vulnerable to Cross Site Scripting (XSS)	Aug 15, 2023 2y ago
CVE-2023-30752	medium	5.9/10	WordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 2y ago
CVE-2023-30751	medium	5.9/10	WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 2y ago