Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,462

All time

Critical · Active

12,619

CVSS ≥ 9.0

New · 14 days

1,399

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16531–16560 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-25025	medium	4.3/10	WordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 3y ago
CVE-2023-25489	medium	4.3/10	WordPress Update Theme and Plugins from Zip File Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 3y ago
CVE-2023-25788	medium	6.3/10	WordPress Saphali Woocommerce Lite Plugin <= 1.8.13 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 3y ago
CVE-2023-25980	medium	4.3/10	WordPress Optimize Database after Deleting Revisions Plugin <= 5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 3y ago
CVE-2023-37995	medium	4.3/10	WordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 4, 2023 3y ago
CVE-2023-5357	medium	6.4/10	Instagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Oct 4, 2023 3y ago
CVE-2023-40558	medium	5.4/10	WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-39158	medium	4.3/10	WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-41244	medium	4.3/10	WordPress Localize Remote Images Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-41693	medium	5.4/10	WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-27435	medium	6.3/10	WordPress HTTP Auth Plugin <= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-32091	medium	5.4/10	WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-40009	medium	5.4/10	WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-39159	medium	4.3/10	WordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-40212	medium	4.3/10	WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-40199	medium	5.4/10	WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-40198	medium	5.4/10	WordPress Easy Cookie Law Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-40201	medium	6.5/10	WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-40202	medium	5.4/10	WordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-40210	medium	5.4/10	WordPress SB Child List Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-2830	medium	5.4/10	WordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-39989	medium	5.4/10	WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-39917	medium	4.3/10	WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-39165	medium	5.4/10	WordPress Sign-up Sheets Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-39923	medium	5.4/10	WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-25989	medium	4.3/10	Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks	Oct 3, 2023 3y ago
CVE-2023-25463	medium	5.4/10	WordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-38390	medium	4.3/10	WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-38396	medium	5.4/10	WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago
CVE-2023-37990	medium	4.3/10	WordPress Perelink Pro Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Oct 3, 2023 3y ago