Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,979

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,068

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16411–16440 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-37979	high	7.1/10	WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)	Jul 27, 2023 3y ago
CVE-2023-37980	medium	5.9/10	WordPress Custom Field For WP Job Manager Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)	Jul 27, 2023 3y ago
CVE-2023-37981	high	7.1/10	WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)	Jul 27, 2023 3y ago
CVE-2023-37993	medium	5.9/10	WordPress wpShopGermany IT-RECHT KANZLEI Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)	Jul 27, 2023 3y ago
CVE-2023-38512	medium	5.4/10	WordPress WpStream plugin <= 4.5.4 - Cross Site Request Forgery (CSRF) vulnerability	Jul 27, 2023 3y ago
CVE-2023-36503	medium	6.5/10	WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-36385	high	7.1/10	WordPress PostX – Gutenberg Blocks for Post Grid Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-34017	high	7.1/10	WordPress Five Star Restaurant Reservations Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-36502	high	7.1/10	WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-36501	high	7.1/10	WordPress teachPress Plugin <= 9.0.2 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-34369	medium	5.9/10	WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-35043	high	7.1/10	WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-33925	high	7.1/10	WordPress WooCommerce Product Categories Selection Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Jul 25, 2023 3y ago
CVE-2023-33312	high	7.1/10	WordPress Easy Captcha Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-33329	medium	5.9/10	WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-36383	medium	5.9/10	WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-36384	high	7.1/10	WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-24390	medium	5.9/10	WordPress WeSecur Security Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2022-47421	medium	5.9/10	WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2022-34155	high	8.8/10	WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication	Jul 18, 2023 3y ago
CVE-2023-32965	high	7.1/10	WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-37892	medium	4.3/10	WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37973	medium	5.4/10	WordPress Replace Word Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37889	medium	4.3/10	WordPress WPAdmin AWS CDN Plugin <= 2.0.13 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25036	medium	4.3/10	WordPress Social Media Icons Widget Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37387	medium	5.4/10	WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-47169	medium	4.3/10	WordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37386	medium	5.4/10	WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25475	medium	4.3/10	WordPress Smart YouTube PRO Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-45828	medium	4.3/10	WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago