Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,981

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,015

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16711–16740 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-47152	medium	5.4/10	WordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 24, 2023 3y ago
CVE-2022-45364	medium	5.4/10	WordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin <= 1.3.6.5 is vulnerable to Cross Site Request Forgery (CSRF)	May 24, 2023 3y ago
CVE-2022-46816	medium	4.3/10	WordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 24, 2023 3y ago
CVE-2023-2496	high	7.1/10	Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Improper Authorization to Arbitrary File Upload	May 23, 2023 3y ago
CVE-2023-2494	medium	4.6/10	Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Missing Authorization to Limited Privilege Granting	May 23, 2023 3y ago
CVE-2023-2498	medium	6.4/10	Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	May 23, 2023 3y ago
CVE-2023-25474	medium	4.3/10	WordPress About Me 3000 widget Plugin <= 2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2022-46813	medium	4.3/10	WordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-26011	medium	4.3/10	WordPress Read More Excerpt Link Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-26014	medium	4.3/10	WordPress Minify HTML Plugin <= 2.1.7 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25056	medium	4.3/10	WordPress Feed Them Social Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2022-46853	medium	4.3/10	WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2022-46851	medium	4.3/10	WordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25707	medium	6.3/10	WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25481	medium	5.4/10	WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25472	medium	4.3/10	WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25448	medium	5.4/10	WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-25447	medium	4.3/10	WordPress ColorWay Theme <= 4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-41608	medium	5.4/10	WordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-44739	medium	5.3/10	WordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45076	medium	4.3/10	WordPress Flexible Elementor Panel Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45079	medium	4.7/10	WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45376	medium	4.3/10	WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47167	medium	5.4/10	WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47183	medium	5.4/10	WordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks Plugin <= 0.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47611	medium	4.3/10	WordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47609	medium	6.3/10	WordPress DNUI Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47142	medium	4.3/10	WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22714	medium	4.3/10	WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22709	medium	4.3/10	WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago