Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

343,031

All time

Critical · Active

11,212

CVSS ≥ 9.0

New · 14 days

3,032

Newly disclosed

Feed last synced

34 mins ago

Data freshness

Showing 17071–17100 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-24419	high	7.1/10	WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2022-43459	medium	5.4/10	WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-24415	medium	5.4/10	WordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 23, 2023 3y ago
CVE-2023-24384	medium	4.3/10	WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 23, 2023 3y ago
CVE-2022-4786	—	—	Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode	Feb 21, 2023 3y ago
CVE-2023-24388	medium	5.4/10	WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 17, 2023 3y ago
CVE-2023-23899	medium	4.3/10	WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 17, 2023 3y ago
CVE-2023-24382	medium	5.4/10	WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2022-46862	medium	4.3/10	WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-24377	medium	4.3/10	WordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-25065	medium	5.4/10	WordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-25066	medium	4.3/10	WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2022-43469	medium	5.4/10	WordPress Corona Virus (COVID-19) Banner & Live Data Plugin <= 1.7.0.6 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2022-41134	medium	5.4/10	WordPress Optinly Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 13, 2023 3y ago
CVE-2023-0270	—	—	YaMaps for WordPress Plugin < 0.6.26 - Contributor+ Stored XSS	Feb 13, 2023 3y ago
CVE-2022-41620	medium	5.4/10	WordPress SeoSamba for WordPress Webmasters Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 8, 2023 3y ago
CVE-2022-4626	—	—	PPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in Shortcode	Feb 6, 2023 3y ago
CVE-2022-4321	—	—	PDF Generator for WordPress < 1.1.2 - Reflected XSS	Feb 6, 2023 3y ago
CVE-2022-4674	—	—	Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode	Feb 6, 2023 3y ago
CVE-2022-29416	medium	4.7/10	WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)	Feb 6, 2023 3y ago
CVE-2022-46842	medium	5.4/10	WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-46815	medium	5.4/10	WordPress Conditional Shipping for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-45807	medium	5.4/10	WordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-45067	medium	4.3/10	WordPress Exclusive Addons Elementor Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-40692	medium	5.4/10	WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-44585	medium	5.4/10	WordPress Homepage Pop-up Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-36401	medium	5.4/10	WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 2, 2023 3y ago
CVE-2022-4654	—	—	Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode	Jan 30, 2023 3y ago
CVE-2022-4496	—	—	miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login	Jan 30, 2023 3y ago
CVE-2022-45820	critical	9.1/10	WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection	Jan 24, 2023 3y ago