Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,981

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,014

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16771–16800 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-45846	medium	5.4/10	WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)	May 10, 2023 3y ago
CVE-2022-47587	medium	5.9/10	WordPress WP Search Analytics Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47590	high	7.1/10	WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47600	high	7.1/10	WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47606	medium	5.9/10	WordPress WP-CORS Plugin <= 0.2.1 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47423	medium	5.9/10	WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47436	medium	5.9/10	WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47441	high	7.1/10	WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-47137	medium	5.9/10	WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46861	medium	5.9/10	WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46817	medium	5.9/10	WordPress Flyzoo Chat Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46819	medium	5.9/10	WordPress Continuous announcement scroller Plugin <= 13.0 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-33961	medium	4.0/10	WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.5.8 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-32970	medium	4.1/10	WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-27455	high	7.1/10	WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-27419	high	7.1/10	WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30746	medium	5.9/10	WordPress Booqable Rental Plugin Plugin <= 2.4.15 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22696	medium	6.5/10	WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-29101	high	7.1/10	WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24406	medium	5.9/10	WordPress Simple Popup Images Plugin <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22711	medium	6.5/10	WordPress IMPress Listings Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24418	medium	5.9/10	WordPress Tiny carousel horizontal slider plus Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-28932	medium	5.9/10	WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24392	high	7.1/10	WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30777	high	7.1/10	WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46844	medium	6.5/10	WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46858	high	7.1/10	WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46864	high	7.1/10	WordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46822	high	7.1/10	WordPress WooCommerce JazzCash Gateway Plugin Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2023-24372	medium	5.9/10	WordPress Simple Custom Author Profiles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago