Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

354,483

All time

Critical · Active

12,620

CVSS ≥ 9.0

New · 14 days

1,368

Newly disclosed

Feed last synced

49 mins ago

Data freshness

Showing 17251–17280 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-27455	high	7.1/10	WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-27419	high	7.1/10	WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30746	medium	5.9/10	WordPress Booqable Rental Plugin Plugin <= 2.4.15 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22696	medium	6.5/10	WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-29101	high	7.1/10	WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24406	medium	5.9/10	WordPress Simple Popup Images Plugin <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-22711	medium	6.5/10	WordPress IMPress Listings Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24418	medium	5.9/10	WordPress Tiny carousel horizontal slider plus Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-28932	medium	5.9/10	WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-24392	high	7.1/10	WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2023-30777	high	7.1/10	WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)	May 10, 2023 3y ago
CVE-2022-46844	medium	6.5/10	WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46858	high	7.1/10	WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46864	high	7.1/10	WordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-46822	high	7.1/10	WordPress WooCommerce JazzCash Gateway Plugin Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2023-24372	medium	5.9/10	WordPress Simple Custom Author Profiles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2022-41640	medium	6.5/10	WordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)	May 9, 2023 3y ago
CVE-2023-22710	high	7.1/10	WordPress Return and Warranty Management System for WooCommerce Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-24376	medium	5.9/10	WordPress WP Simple Events Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-1979	medium	4.9/10	Auth bypass in Web Stories for WordPress plugin	May 8, 2023 3y ago
CVE-2023-24408	medium	6.5/10	WordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2022-45065	high	7.1/10	WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-28493	medium	6.5/10	WordPress Newsmag Theme <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2022-47439	high	7.1/10	WordPress Open Graphite Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2022-47437	medium	5.9/10	WordPress WSB Brands Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-25052	medium	5.9/10	WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-28169	medium	5.9/10	WordPress Easy Event calendar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-25452	medium	5.9/10	WordPress CMS Press Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2022-45812	medium	6.5/10	WordPress Exxp Plugin <= 2.6.8 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago
CVE-2023-25021	medium	5.9/10	WordPress FareHarbor for WordPress Plugin <= 3.6.6 is vulnerable to Cross Site Scripting (XSS)	May 8, 2023 3y ago