Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

342,983

All time

Critical · Active

11,210

CVSS ≥ 9.0

New · 14 days

3,009

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16921–16950 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-25031	medium	5.9/10	WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25024	medium	5.9/10	WordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25027	medium	5.9/10	WordPress Chained Quiz Plugin <= 1.3.2.5 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25022	medium	5.9/10	WordPress Watu Quiz Plugin <= 3.3.8 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25023	medium	5.9/10	WordPress WebinarIgnition Plugin <= 2.14.2 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25046	medium	5.9/10	WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-24398	medium	5.9/10	WordPress EZP Coming Soon Page Plugin <= 1.0.7.3 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-24402	medium	5.9/10	WordPress WP Booking System Plugin <= 2.0.18 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25059	medium	5.9/10	WordPress avalex Plugin <= 3.0.3 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25061	medium	6.5/10	WordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)	Apr 7, 2023 3y ago
CVE-2023-25062	medium	5.9/10	WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24378	medium	6.5/10	WordPress Glossary Plugin <= 2.1.27 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24374	medium	6.5/10	WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24396	medium	5.9/10	WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2022-46793	medium	5.4/10	WordPress Product Feed PRO for WooCommerce Plugin <= 12.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Apr 6, 2023 3y ago
CVE-2023-24387	medium	5.9/10	WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24411	medium	6.5/10	WordPress BNE Testimonials Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24403	medium	5.9/10	WordPress bbPress Voting Plugin <= 2.1.11.0 is vulnerable to Cross-Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24383	medium	5.9/10	WordPress Namaste! LMS Plugin <= 2.5.9.1 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-23898	medium	5.5/10	WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24003	medium	6.5/10	WordPress WP Popups Plugin <= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24002	medium	5.9/10	WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24004	medium	5.9/10	WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24006	medium	5.9/10	WordPress WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups Plugin <= 2.6.0 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-24001	medium	5.9/10	WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-23996	medium	5.9/10	WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-23998	medium	5.9/10	WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-23980	medium	5.9/10	WordPress MailOptin Plugin <= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-23972	medium	5.9/10	WordPress Social Like Box and Page by WpDevArt Plugin <= 0.8.39 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago
CVE-2023-23987	medium	5.9/10	WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)	Apr 6, 2023 3y ago