Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,463

All time

Critical · Active

12,619

CVSS ≥ 9.0

New · 14 days

1,384

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16621–16650 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-27628	medium	6.5/10	WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-25483	medium	5.9/10	WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40677	medium	5.9/10	WordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40675	medium	5.9/10	WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40669	medium	6.5/10	WordPress Collapse-O-Matic Plugin <= 1.8.5.5 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40676	medium	5.9/10	WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40667	high	7.1/10	WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40668	medium	5.9/10	WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40665	medium	5.9/10	WordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40664	high	7.1/10	WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40663	high	7.1/10	WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40330	high	7.1/10	WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40605	medium	6.5/10	WordPress Typing Effect Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-27616	high	7.1/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-27617	medium	5.9/10	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-40604	medium	5.9/10	WordPress Cookies by JM Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-28790	medium	5.9/10	WordPress Simple Staff List Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-28490	high	7.1/10	WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)	Sep 27, 2023 3y ago
CVE-2023-41860	medium	5.8/10	WordPress Travel Map Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)	Sep 26, 2023 3y ago
CVE-2023-41861	high	7.1/10	WordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)	Sep 26, 2023 3y ago
CVE-2023-41863	high	7.1/10	WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-41867	high	7.1/10	WordPress AcyMailing SMTP Newsletter Plugin <= 8.6.2 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-41868	high	7.1/10	WordPress Stagtools Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-41871	high	7.1/10	WordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-4502	—	—	Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS	Sep 25, 2023 3y ago
CVE-2023-41872	high	7.1/10	WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-41874	high	7.1/10	WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-41948	medium	5.9/10	WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-41949	medium	5.9/10	WordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)	Sep 25, 2023 3y ago
CVE-2023-5062	medium	6.4/10	WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Sep 20, 2023 3y ago