Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,413

All time

Critical · Active

12,590

CVSS ≥ 9.0

New · 14 days

1,355

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16441–16470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-41694	medium	4.3/10	WordPress Realbig Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41684	medium	4.3/10	WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-5467	medium	6.4/10	GEO my WordPress <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Oct 10, 2023 3y ago
CVE-2023-41672	medium	4.3/10	WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41670	medium	5.4/10	WordPress Use Memcached Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41669	medium	4.3/10	WordPress Live News Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41668	medium	5.4/10	WordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41667	medium	4.3/10	WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41660	medium	6.5/10	WordPress WP Migration Plugin DB & Files – WP Synchro Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44993	medium	4.3/10	WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44473	medium	5.4/10	WordPress Table of Contents Plus Plugin <= 2302 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44240	medium	4.3/10	WordPress Timthumb Vulnerability Scanner Plugin <= 1.54 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44246	medium	4.3/10	WordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44238	medium	4.3/10	WordPress Remove slug from custom post type Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44237	medium	4.3/10	WordPress WP Site Protector Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44236	medium	5.4/10	WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44232	medium	4.3/10	WordPress WP Hide Pages Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44231	medium	4.3/10	WordPress Contact Form Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44260	medium	4.3/10	WordPress Woocommerce ESTO Plugin <= 2.23.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44233	medium	5.4/10	WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-44243	medium	4.3/10	WordPress Instant CSS Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-44146	medium	4.3/10	WordPress Checkfront Online Booking System Plugin <= 3.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41950	medium	5.4/10	WordPress Laposta Signup Basic Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-40607	medium	4.3/10	WordPress CLUEVO LMS, E-Learning Platform Plugin <= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41801	medium	5.4/10	WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41732	medium	5.4/10	WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41659	medium	5.4/10	WordPress Responsive Gallery Grid Plugin <= 2.3.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41654	medium	5.4/10	WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41650	medium	4.3/10	WordPress Remove/hide Author, Date, Category Like Entry-Meta Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-29235	medium	5.4/10	WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago