Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,482

All time

Critical · Active

12,620

CVSS ≥ 9.0

New · 14 days

1,369

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 17191–17220 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-25481	medium	5.4/10	WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25472	medium	4.3/10	WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 23, 2023 3y ago
CVE-2023-25448	medium	5.4/10	WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-25447	medium	4.3/10	WordPress ColorWay Theme <= 4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-41608	medium	5.4/10	WordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-44739	medium	5.3/10	WordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45076	medium	4.3/10	WordPress Flexible Elementor Panel Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45079	medium	4.7/10	WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-45376	medium	4.3/10	WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47167	medium	5.4/10	WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47183	medium	5.4/10	WordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks Plugin <= 0.2.6 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47611	medium	4.3/10	WordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47609	medium	6.3/10	WordPress DNUI Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47142	medium	4.3/10	WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22714	medium	4.3/10	WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22709	medium	4.3/10	WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22692	medium	4.3/10	WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2023-22688	medium	4.3/10	WordPress WP Tabs Slides Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 22, 2023 3y ago
CVE-2022-47134	medium	4.3/10	WordPress Gallery Metabox Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)	May 20, 2023 3y ago
CVE-2023-32589	medium	4.3/10	WordPress Dyslexiefont Free Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 20, 2023 3y ago
CVE-2023-22689	medium	5.4/10	WordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control	May 20, 2023 3y ago
CVE-2023-24414	medium	4.3/10	WordPress Robo Gallery Plugin <= 3.2.11 is vulnerable to Cross Site Request Forgery (CSRF)	May 20, 2023 3y ago
CVE-2023-25698	medium	5.4/10	WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	May 18, 2023 3y ago
CVE-2023-27430	medium	5.4/10	WordPress Mass Delete Unused Tags Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 18, 2023 3y ago
CVE-2023-27423	medium	5.4/10	WordPress Auto Prune Posts Plugin <= 1.8.0 is vulnerable to Cross Site Request Forgery (CSRF)	May 18, 2023 3y ago
CVE-2023-23999	medium	6.5/10	WordPress Google Analytics by Monster Insights Plugin <= 8.14.0 is vulnerable to Cross Site Scripting (XSS)	May 18, 2023 3y ago
CVE-2022-47157	medium	5.9/10	WordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)	May 18, 2023 3y ago
CVE-2023-30780	medium	6.5/10	WordPress User IP and Location Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)	May 18, 2023 3y ago
CVE-2023-32515	medium	5.9/10	WordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS)	May 18, 2023 3y ago
CVE-2023-31233	medium	5.9/10	WordPress Baidu Tongji generator Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)	May 18, 2023 3y ago