Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,462

All time

Critical · Active

12,619

CVSS ≥ 9.0

New · 14 days

1,401

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16471–16500 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-44995	medium	5.4/10	WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44994	medium	4.3/10	WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44476	medium	4.3/10	WordPress CopyRightPro Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44475	medium	5.4/10	WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44471	medium	4.3/10	WordPress Backend Localization Plugin <= 2.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44470	medium	5.4/10	WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44241	medium	4.3/10	WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44261	medium	4.3/10	WordPress Block Plugin Update Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44259	medium	4.3/10	WordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-44257	medium	4.3/10	WordPress Mang Board WP Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41876	medium	4.3/10	WordPress WP Gallery Metabox Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41858	medium	4.3/10	WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41854	medium	5.4/10	WordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41853	medium	4.3/10	WordPress WP iCal Availability Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41852	medium	4.3/10	WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41851	medium	4.3/10	WordPress WP Custom Post Template Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41850	medium	4.3/10	WordPress Outbound Link Manager Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41730	medium	4.3/10	WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41697	medium	4.3/10	WordPress Easy WP Cleaner Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41694	medium	4.3/10	WordPress Realbig Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-41684	medium	4.3/10	WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 10, 2023 3y ago
CVE-2023-5467	medium	6.4/10	GEO my WordPress <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Oct 10, 2023 3y ago
CVE-2023-41672	medium	4.3/10	WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41670	medium	5.4/10	WordPress Use Memcached Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41669	medium	4.3/10	WordPress Live News Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41668	medium	5.4/10	WordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41667	medium	4.3/10	WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-41660	medium	6.5/10	WordPress WP Migration Plugin DB & Files – WP Synchro Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44993	medium	4.3/10	WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44473	medium	5.4/10	WordPress Table of Contents Plus Plugin <= 2302 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago