Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,979

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,068

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 16441–16470 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-46857	medium	5.4/10	WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25473	medium	5.4/10	WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25482	medium	4.3/10	WordPress WP Tiles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-38062	medium	4.3/10	WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2022-36424	medium	4.3/10	WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-37985	medium	4.3/10	WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-37974	medium	5.4/10	WordPress WP-FB-AutoConnect Plugin <= 4.6.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-37968	medium	5.4/10	WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-34005	medium	6.5/10	WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2022-47172	medium	4.3/10	WordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36514	medium	6.5/10	WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36513	medium	5.4/10	WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36511	medium	4.3/10	WordPress WooCommerce Order Barcodes Plugin <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-31216	medium	4.3/10	WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35880	medium	5.4/10	WordPress WooCommerce Brands Plugin <= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35096	medium	5.4/10	WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35089	medium	4.3/10	WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35038	medium	5.4/10	WordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-27424	medium	5.4/10	WordPress Inactive User Deleter Plugin <= 1.59 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-22672	medium	4.3/10	WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-27606	medium	5.4/10	WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-32104	medium	4.3/10	WordPress MyCurator Content Curation Plugin <= 3.74 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35091	medium	4.3/10	WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35773	medium	4.3/10	WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-24417	medium	4.3/10	WordPress Worthy – VG WORT Integration für WordPress Plugin <= 1.6.5-6497609 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36522	medium	4.3/10	WordPress Quiz Expert – Easy Quiz Maker, Exam and Test Manager Plugin <= 1.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25443	medium	4.3/10	WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-34029	medium	4.3/10	WordPress Disable WordPress Update Notifications Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25706	medium	5.4/10	WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35044	medium	4.3/10	WordPress Securimage-WP Plugin <= 3.6.16 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago