Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,179

All time

Critical · Active

12,288

CVSS ≥ 9.0

New · 14 days

1,821

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16831–16860 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-35774	medium	5.4/10	WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-36517	medium	4.3/10	WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-35781	medium	5.4/10	WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2022-45823	medium	4.3/10	WordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25468	medium	4.3/10	WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-23997	medium	4.3/10	WordPress Database Collation Fix Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25487	medium	4.3/10	WordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-24421	medium	5.4/10	WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-25051	medium	4.3/10	WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 11, 2023 3y ago
CVE-2023-37392	medium	5.4/10	WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-35912	medium	4.3/10	WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-36691	medium	5.4/10	WordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-28995	medium	5.4/10	WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-23993	medium	5.4/10	WordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-28986	medium	5.4/10	WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-29095	high	7.6/10	WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection	Jul 10, 2023 3y ago
CVE-2023-28989	medium	4.3/10	WordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-25478	medium	4.3/10	WordPress Weather Station Plugin <= 3.8.12 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22695	medium	4.3/10	WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22694	medium	4.3/10	WordPress BigContact Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-24405	medium	5.4/10	WordPress Contact Form 7 – PayPal & Stripe Add-on Plugin <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-22673	medium	5.4/10	WordPress Website Monetization by MageNet Plugin <= 1.0.29.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2023-24395	medium	5.4/10	WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 10, 2023 3y ago
CVE-2020-8934	medium	4.3/10	Site Kit by Google plugin for WordPress	Jul 7, 2023 3y ago
CVE-2023-2982	critical	9.8/10	WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass	Jun 29, 2023 3y ago
CVE-2023-0873	—	—	Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS	Jun 27, 2023 3y ago
CVE-2023-29438	medium	5.9/10	WordPress SimpleModal Contact Form (SMCF) Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)	Jun 26, 2023 3y ago
CVE-2023-29437	medium	6.5/10	WordPress Connections Business Directory Plugin <= 10.4.36 is vulnerable to Cross Site Scripting (XSS)	Jun 26, 2023 3y ago
CVE-2023-29435	medium	6.5/10	WordPress Cryptocurrency All-in-One Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)	Jun 26, 2023 3y ago
CVE-2023-29436	medium	6.5/10	WordPress IFrame Shortcode Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)	Jun 26, 2023 3y ago