Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,503

All time

Critical · Active

12,230

CVSS ≥ 9.0

New · 14 days

3,118

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2011–2040 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-28095	high	8.1/10	WordPress Marcell theme <= 1.2.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28094	high	8.1/10	WordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28093	high	8.1/10	WordPress Ozisti theme <= 1.1.10 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28092	high	8.1/10	WordPress Sounder theme <= 1.3.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28091	high	8.1/10	WordPress Coleo theme <= 1.1.7 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28090	high	8.1/10	WordPress Gamezone theme <= 1.1.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28089	high	8.1/10	WordPress Daiquiri theme <= 1.2.4 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28088	high	8.1/10	WordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28087	high	8.1/10	WordPress Filmax theme <= 1.1.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28086	high	8.1/10	WordPress Run Gran theme <= 2.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28085	high	8.1/10	WordPress Mahogany theme <= 2.9 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28084	high	8.1/10	WordPress Bazinga theme <= 1.1.9 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28081	high	8.1/10	WordPress Windsor theme <= 2.5.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28079	high	8.1/10	WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28078	medium	4.9/10	WordPress uListing plugin <= 2.2.0 - Arbitrary File Download vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28077	high	8.1/10	WordPress Vapester theme <= 1.1.10 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28076	high	7.5/10	WordPress Guff theme <= 1.0.1 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28075	high	7.1/10	WordPress Porto theme <= 7.6.2 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28074	critical	9.8/10	WordPress Pizza House theme <= 1.4.0 - PHP Object Injection vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28072	high	7.1/10	WordPress pixfort Core plugin <= 3.2.22 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28071	medium	6.3/10	WordPress pixfort Core plugin <= 3.2.22 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28069	high	8.1/10	WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28068	high	8.1/10	WordPress Rhythmo theme <= 1.3.4 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28067	high	8.1/10	WordPress Bassein theme <= 1.0.15 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28066	high	8.1/10	WordPress Legrand theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28065	high	8.1/10	WordPress Eject theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28064	high	8.1/10	WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28063	high	8.1/10	WordPress Asia Garden theme <= 1.3.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28062	high	8.1/10	WordPress Happy Baby theme <= 1.2.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28061	high	8.1/10	WordPress Tiger Claw theme <= 1.1.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago