Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,467

All time

Critical · Active

12,619

CVSS ≥ 9.0

New · 14 days

1,376

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 16891–16920 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-33329	medium	5.9/10	WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-36383	medium	5.9/10	WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-36384	high	7.1/10	WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-24390	medium	5.9/10	WordPress WeSecur Security Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2022-47421	medium	5.9/10	WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2022-34155	high	8.8/10	WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication	Jul 18, 2023 3y ago
CVE-2023-32965	high	7.1/10	WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)	Jul 18, 2023 3y ago
CVE-2023-37892	medium	4.3/10	WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37973	medium	5.4/10	WordPress Replace Word Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37889	medium	4.3/10	WordPress WPAdmin AWS CDN Plugin <= 2.0.13 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25036	medium	4.3/10	WordPress Social Media Icons Widget Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37387	medium	5.4/10	WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-47169	medium	4.3/10	WordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-37386	medium	5.4/10	WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25475	medium	4.3/10	WordPress Smart YouTube PRO Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-45828	medium	4.3/10	WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-46857	medium	5.4/10	WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25473	medium	5.4/10	WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2023-25482	medium	4.3/10	WordPress WP Tiles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 18, 2023 3y ago
CVE-2022-38062	medium	4.3/10	WordPress Download Theme Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2022-36424	medium	4.3/10	WordPress Easy Appointments Plugin <= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-37985	medium	4.3/10	WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-37974	medium	5.4/10	WordPress WP-FB-AutoConnect Plugin <= 4.6.1 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-37968	medium	5.4/10	WordPress Falang multilanguage Plugin <= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-34005	medium	6.5/10	WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2022-47172	medium	4.3/10	WordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36514	medium	6.5/10	WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36513	medium	5.4/10	WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-36511	medium	4.3/10	WordPress WooCommerce Order Barcodes Plugin <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago
CVE-2023-31216	medium	4.3/10	WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)	Jul 17, 2023 3y ago