Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,412

All time

Critical · Active

12,590

CVSS ≥ 9.0

New · 14 days

1,357

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16351–16380 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-45006	high	7.1/10	WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45004	high	7.1/10	WordPress Woo Custom Emails Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45003	high	7.1/10	WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45010	medium	5.9/10	WordPress Complete Open Graph Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-45005	high	7.1/10	WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-44990	medium	5.9/10	WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-24385	medium	5.9/10	WordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)	Oct 17, 2023 2y ago
CVE-2023-4811	—	—	WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting	Oct 16, 2023 2y ago
CVE-2023-3706	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure	Oct 16, 2023 2y ago
CVE-2023-3746	—	—	ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-5057	—	—	ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS	Oct 16, 2023 2y ago
CVE-2023-3707	—	—	ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure	Oct 16, 2023 2y ago
CVE-2023-5561	—	—	WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure	Oct 16, 2023 2y ago
CVE-2023-46087	medium	4.3/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-46066	medium	5.9/10	WordPress Mediabay Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44987	medium	5.9/10	WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44986	medium	5.9/10	WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44985	medium	6.5/10	WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44984	medium	6.5/10	WordPress bbp style pack Plugin <= 5.6.7 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-44229	medium	5.9/10	WordPress Tiny Carousel Horizontal Slider Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)	Oct 16, 2023 2y ago
CVE-2023-45836	medium	4.3/10	WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45831	medium	5.4/10	WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45763	medium	5.4/10	WordPress Taggbox Plugin <= 2.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45753	medium	4.3/10	WordPress which template file Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45752	medium	4.3/10	WordPress Post Gallery Plugin <= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45749	medium	4.3/10	WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45748	medium	4.3/10	WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45647	medium	5.4/10	WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45645	medium	5.4/10	WordPress WP Open Street Map Plugin <= 1.25 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago
CVE-2023-45643	medium	4.3/10	WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 16, 2023 2y ago