Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,177

All time

Critical · Active

12,287

CVSS ≥ 9.0

New · 14 days

1,834

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16591–16620 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-24397	medium	5.9/10	WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-25471	high	7.1/10	WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-28415	medium	5.9/10	WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-28692	medium	5.9/10	WordPress WP Abstracts Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-25466	medium	5.8/10	WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-35092	medium	5.9/10	WordPress breadcrumb simple Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-35094	medium	6.5/10	WordPress WP Matterport Shortcode Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-25453	high	7.1/10	WordPress WordPress Tables Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34372	medium	5.9/10	WordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-32294	medium	5.9/10	WordPress GDPR Cookie Consent Notice Box Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34004	medium	6.5/10	WordPress WooCommerce Box Office Plugin <= 1.1.50 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34008	high	7.1/10	WordPress WP ERP Plugin <= 1.12.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34022	high	7.1/10	WordPress Dynamic QR Code Generator Plugin <= 0.0.5 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34023	high	7.1/10	WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34032	high	7.1/10	WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34172	medium	5.9/10	WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34173	medium	5.9/10	WordPress Yandex Metrica Counter Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34174	high	7.1/10	WordPress BBS e-Popup Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34180	high	7.1/10	WordPress Google Fonts For WordPress Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34175	high	7.1/10	WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34176	high	7.1/10	WordPress Chilexpress woo oficial Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34184	high	7.1/10	WordPress Woocommerce Order address Print Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34183	medium	5.9/10	WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-34187	medium	5.9/10	WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-27426	medium	5.9/10	WordPress NotifyVisitors Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-33929	medium	5.9/10	WordPress Easy Admin Menu Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-33320	high	7.1/10	WordPress WP-Hijri Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-33325	high	7.1/10	WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-33317	high	7.1/10	WordPress WooCommerce Warranty Requests Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago
CVE-2023-33210	medium	5.9/10	WordPress nuajik CDN Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 30, 2023 3y ago