Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,077

All time

Critical · Active

12,278

CVSS ≥ 9.0

New · 14 days

1,750

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16351–16380 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-44998	medium	4.3/10	WordPress Category Meta Plugin <= 1.2.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-45047	high	7.1/10	WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 12, 2023 2y ago
CVE-2023-44997	medium	5.4/10	WordPress WP Forms Puzzle Captcha Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 11, 2023 2y ago
CVE-2023-44996	medium	5.4/10	WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44995	medium	5.4/10	WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44994	medium	4.3/10	WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44476	medium	4.3/10	WordPress CopyRightPro Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44475	medium	5.4/10	WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44471	medium	4.3/10	WordPress Backend Localization Plugin <= 2.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44470	medium	5.4/10	WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44241	medium	4.3/10	WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44261	medium	4.3/10	WordPress Block Plugin Update Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44259	medium	4.3/10	WordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-44257	medium	4.3/10	WordPress Mang Board WP Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41876	medium	4.3/10	WordPress WP Gallery Metabox Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41858	medium	4.3/10	WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41854	medium	5.4/10	WordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41853	medium	4.3/10	WordPress WP iCal Availability Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41852	medium	4.3/10	WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41851	medium	4.3/10	WordPress WP Custom Post Template Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41850	medium	4.3/10	WordPress Outbound Link Manager Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41730	medium	4.3/10	WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41697	medium	4.3/10	WordPress Easy WP Cleaner Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41694	medium	4.3/10	WordPress Realbig Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-41684	medium	4.3/10	WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 2y ago
CVE-2023-5467	medium	6.4/10	GEO my WordPress <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Oct 10, 2023 2y ago
CVE-2023-41672	medium	4.3/10	WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 2y ago
CVE-2023-41670	medium	5.4/10	WordPress Use Memcached Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 2y ago
CVE-2023-41669	medium	4.3/10	WordPress Live News Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 2y ago
CVE-2023-41668	medium	5.4/10	WordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 2y ago