Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,179

All time

Critical · Active

12,288

CVSS ≥ 9.0

New · 14 days

1,836

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16801–16830 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-36514	medium	6.5/10	WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36513	medium	5.4/10	WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36511	medium	4.3/10	WordPress WooCommerce Order Barcodes Plugin <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-31216	medium	4.3/10	WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35880	medium	5.4/10	WordPress WooCommerce Brands Plugin <= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35096	medium	5.4/10	WordPress myCred Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35089	medium	4.3/10	WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-35038	medium	5.4/10	WordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-27424	medium	5.4/10	WordPress Inactive User Deleter Plugin <= 1.59 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-22672	medium	4.3/10	WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-27606	medium	5.4/10	WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-32104	medium	4.3/10	WordPress MyCurator Content Curation Plugin <= 3.74 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35091	medium	4.3/10	WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35773	medium	4.3/10	WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-24417	medium	4.3/10	WordPress Worthy – VG WORT Integration für WordPress Plugin <= 1.6.5-6497609 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36522	medium	4.3/10	WordPress Quiz Expert – Easy Quiz Maker, Exam and Test Manager Plugin <= 1.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25443	medium	4.3/10	WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-34029	medium	4.3/10	WordPress Disable WordPress Update Notifications Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25706	medium	5.4/10	WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35044	medium	4.3/10	WordPress Securimage-WP Plugin <= 3.6.16 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36690	high	8.1/10	WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-34185	medium	4.3/10	WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35047	medium	4.3/10	WordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35778	medium	4.3/10	WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35780	medium	4.3/10	WordPress Galleria Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36687	medium	5.4/10	WordPress Menubar Plugin <= 5.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36693	medium	4.3/10	WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-37391	medium	5.4/10	WordPress WordPress Mobile Pack Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-34015	medium	5.4/10	WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35913	medium	4.3/10	WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago