Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,179

All time

Critical · Active

12,288

CVSS ≥ 9.0

New · 14 days

1,836

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16681–16710 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-31074	high	7.1/10	WordPress Extensions for Leaflet Map Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-31076	high	7.1/10	WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-31071	high	7.1/10	WordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-30877	high	7.1/10	WordPress XML for Google Merchant Center Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-30874	medium	5.9/10	WordPress GPS Plotter Plugin <= 5.1.4 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-30876	medium	5.9/10	WordPress Dave's WordPress Live Search Plugin <= 4.8.1 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-28533	medium	5.9/10	WordPress Cab Grid Plugin <= 1.5.15 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-28622	medium	5.9/10	WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	Aug 17, 2023 3y ago
CVE-2023-30871	high	7.1/10	WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 3y ago
CVE-2023-30779	high	7.1/10	WordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 3y ago
CVE-2023-30784	medium	6.5/10	WordPress Kaya QR Code Generator Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 3y ago
CVE-2023-30473	high	7.1/10	WordPress YML for Yandex Market Plugin <= 3.10.7 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 3y ago
CVE-2023-30785	high	7.1/10	WordPress Video Grid Plugin <= 1.21 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 3y ago
CVE-2023-30782	high	7.1/10	WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 3y ago
CVE-2023-30786	medium	5.9/10	WordPress Captcha Them All Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)	Aug 16, 2023 3y ago
CVE-2023-30498	high	7.1/10	WordPress Vimeotheque Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)	Aug 15, 2023 3y ago
CVE-2023-30778	medium	5.5/10	WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 15, 2023 3y ago
CVE-2023-30747	high	7.1/10	WordPress WooCommerce Easy Duplicate Product Plugin <= 0.3.0.0 is vulnerable to Cross Site Scripting (XSS)	Aug 15, 2023 3y ago
CVE-2023-30752	medium	5.9/10	WordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-30751	medium	5.9/10	WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-28535	high	7.1/10	WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-30749	medium	5.9/10	WordPress Optima Express + MarketBoost IDX Plugin Plugin <= 7.3.0 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-30754	high	7.1/10	WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-30489	high	7.1/10	WordPress Email Subscription Popup Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-30477	medium	5.9/10	WordPress AFFILIATE Solution Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-30475	high	7.1/10	WordPress Coupon Affiliates Plugin <= 5.4.5 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-29097	medium	5.9/10	WordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-30483	high	7.1/10	WordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)	Aug 14, 2023 3y ago
CVE-2023-38397	medium	5.9/10	WordPress Gestion-Pymes Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)	Aug 10, 2023 3y ago
CVE-2023-37388	medium	5.9/10	WordPress Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	Aug 10, 2023 3y ago