Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,462

All time

Critical · Active

12,619

CVSS ≥ 9.0

New · 14 days

1,399

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16501–16530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-44240	medium	4.3/10	WordPress Timthumb Vulnerability Scanner Plugin <= 1.54 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44246	medium	4.3/10	WordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44238	medium	4.3/10	WordPress Remove slug from custom post type Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44237	medium	4.3/10	WordPress WP Site Protector Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44236	medium	5.4/10	WordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44232	medium	4.3/10	WordPress WP Hide Pages Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44231	medium	4.3/10	WordPress Contact Form Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44260	medium	4.3/10	WordPress Woocommerce ESTO Plugin <= 2.23.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 9, 2023 3y ago
CVE-2023-44233	medium	5.4/10	WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-44243	medium	4.3/10	WordPress Instant CSS Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-44146	medium	4.3/10	WordPress Checkfront Online Booking System Plugin <= 3.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41950	medium	5.4/10	WordPress Laposta Signup Basic Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-40607	medium	4.3/10	WordPress CLUEVO LMS, E-Learning Platform Plugin <= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41801	medium	5.4/10	WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41732	medium	5.4/10	WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41659	medium	5.4/10	WordPress Responsive Gallery Grid Plugin <= 2.3.10 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41654	medium	5.4/10	WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-41650	medium	4.3/10	WordPress Remove/hide Author, Date, Category Like Entry-Meta Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-29235	medium	5.4/10	WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-28791	medium	4.3/10	WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-27615	medium	5.4/10	WordPress WP Super Minify Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-27448	medium	5.4/10	WordPress MakeStories (for Google Web Stories) Plugin <= 2.8.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-25033	medium	5.4/10	WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2022-47175	medium	4.3/10	WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-25480	medium	4.3/10	WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-40671	medium	4.3/10	WordPress DX-auto-save-images Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-40008	medium	4.3/10	WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-40556	medium	4.3/10	WordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 6, 2023 3y ago
CVE-2023-40559	medium	4.3/10	WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 3y ago
CVE-2023-27433	medium	5.4/10	WordPress Make Paths Relative Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 3y ago