Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

350,214

All time

Critical · Active

12,288

CVSS ≥ 9.0

New · 14 days

1,754

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 17401–17430 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-31474	high	7.5/10	WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal	Mar 13, 2023 3y ago
CVE-2022-47440	medium	4.3/10	WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 13, 2023 3y ago
CVE-2022-47166	medium	4.3/10	WordPress Void Contact Form 7 Widget For Elementor Page Builder Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 13, 2023 3y ago
CVE-2022-47148	medium	4.3/10	WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46806	medium	5.4/10	WordPress Cart All In One For WooCommerce Plugin <= 1.1.10 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46805	medium	5.4/10	WordPress Conditional Payments for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46798	medium	5.4/10	WordPress WooLentor Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-46797	medium	5.4/10	WordPress Conversios.io Plugin <= 5.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-45068	medium	4.3/10	WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-45804	medium	5.4/10	WordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-40198	medium	4.3/10	WordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-38468	medium	4.3/10	WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-23973	medium	4.3/10	WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-23974	medium	5.4/10	WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2023-23984	medium	5.4/10	WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)	Mar 1, 2023 3y ago
CVE-2022-47179	medium	4.3/10	WordPress OWM Weather Plugin <= 5.6.11 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2022-47612	medium	4.3/10	WordPress Participants Database Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-23983	medium	5.4/10	WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-23992	medium	5.4/10	WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-24419	high	7.1/10	WordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2022-43459	medium	5.4/10	WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 28, 2023 3y ago
CVE-2023-24415	medium	5.4/10	WordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 23, 2023 3y ago
CVE-2023-24384	medium	4.3/10	WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 23, 2023 3y ago
CVE-2022-4786	—	—	Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode	Feb 21, 2023 3y ago
CVE-2023-24388	medium	5.4/10	WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 17, 2023 3y ago
CVE-2023-23899	medium	4.3/10	WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 17, 2023 3y ago
CVE-2023-24382	medium	5.4/10	WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2022-46862	medium	4.3/10	WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-24377	medium	4.3/10	WordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago
CVE-2023-25065	medium	5.4/10	WordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF)	Feb 14, 2023 3y ago