Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,980

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,063

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16471–16500 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-36690	high	8.1/10	WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-34185	medium	4.3/10	WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35047	medium	4.3/10	WordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35778	medium	4.3/10	WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35780	medium	4.3/10	WordPress Galleria Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36687	medium	5.4/10	WordPress Menubar Plugin <= 5.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36693	medium	4.3/10	WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-37391	medium	5.4/10	WordPress WordPress Mobile Pack Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-34015	medium	5.4/10	WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35913	medium	4.3/10	WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35774	medium	5.4/10	WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36517	medium	4.3/10	WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35781	medium	5.4/10	WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2022-45823	medium	4.3/10	WordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25468	medium	4.3/10	WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-23997	medium	4.3/10	WordPress Database Collation Fix Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25487	medium	4.3/10	WordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-24421	medium	5.4/10	WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25051	medium	4.3/10	WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-37392	medium	5.4/10	WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-35912	medium	4.3/10	WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-36691	medium	5.4/10	WordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-28995	medium	5.4/10	WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-23993	medium	5.4/10	WordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-28986	medium	5.4/10	WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-29095	high	7.6/10	WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection	Jul 10, 2023 3y ago
CVE-2023-28989	medium	4.3/10	WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-25478	medium	4.3/10	WordPress Weather Station Plugin <= 3.8.12 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22695	medium	4.3/10	WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22694	medium	4.3/10	WordPress BigContact Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago