Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

343,015

All time

Critical · Active

11,212

CVSS ≥ 9.0

New · 14 days

3,019

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 17041–17070 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-47155	medium	4.3/10	WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 14, 2023 3y ago
CVE-2022-47162	medium	4.3/10	WordPress DH – Anti AdBlocker Plugin <= 36 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 14, 2023 3y ago
CVE-2022-47163	low	3.1/10	WordPress WP CSV to Database Plugin <= 2.6 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 14, 2023 3y ago
CVE-2022-47171	medium	5.9/10	WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)	Mar 14, 2023 3y ago
CVE-2022-47595	medium	4.9/10	WordPress WP Google Maps Plugin <= 9.0.15 is vulnerable to Path Traversal	Mar 14, 2023 3y ago
CVE-2022-4466	—	—	WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS	Mar 13, 2023 3y ago
CVE-2023-25973	medium	5.4/10	WordPress Auto Affiliate Links Plugin <= 6.3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 13, 2023 3y ago
CVE-2023-22700	medium	4.3/10	WordPress PixelYourSite – Your smart PIXEL (TAG) Manager Plugin <= 9.3.0 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 13, 2023 3y ago
CVE-2023-25991	medium	5.4/10	WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 13, 2023 3y ago
CVE-2022-38074	critical	9.9/10	WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection	Mar 13, 2023 3y ago
CVE-2022-31474	high	7.5/10	WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal	Mar 13, 2023 3y ago
CVE-2022-47440	medium	4.3/10	WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 13, 2023 3y ago
CVE-2022-47166	medium	4.3/10	WordPress Void Contact Form 7 Widget For Elementor Page Builder Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 13, 2023 3y ago
CVE-2022-47148	medium	4.3/10	WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46806	medium	5.4/10	WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46805	medium	5.4/10	WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46798	medium	5.4/10	WordPress WooLentor Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46797	medium	5.4/10	WordPress Conversios.io Plugin <= 5.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-45068	medium	4.3/10	WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-45804	medium	5.4/10	WordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-40198	medium	4.3/10	WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-38468	medium	4.3/10	WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-23973	medium	4.3/10	WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-23974	medium	5.4/10	WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-23984	medium	5.4/10	WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-47179	medium	4.3/10	WordPress OWM Weather Plugin <= 5.6.11 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2022-47612	medium	4.3/10	WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-23983	medium	5.4/10	WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-23992	medium	5.4/10	WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-24419	high	7.1/10	WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago