Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,503

All time

Critical · Active

12,230

CVSS ≥ 9.0

New · 14 days

3,118

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2041–2070 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-28060	high	8.1/10	WordPress S.King theme <= 1.5.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28059	high	8.1/10	WordPress Dermatology Clinic theme <= 1.4.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28058	high	8.1/10	WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28057	high	8.1/10	WordPress Mandala theme <= 2.8 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28056	high	8.1/10	WordPress MCKinney's Politics theme <= 1.2.8 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28055	high	8.1/10	WordPress M.Williamson theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28054	high	8.1/10	WordPress Legal Stone theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28053	high	8.1/10	WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28052	high	8.1/10	WordPress Peter Mason theme <= 1.4.5 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28051	high	8.1/10	WordPress Yacht Rental theme <= 2.6 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28050	high	8.1/10	WordPress Beacon theme <= 2.24 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28049	high	8.1/10	WordPress Police Department theme <= 2.17 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28048	high	8.1/10	WordPress FlashMart theme <= 2.0.15 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28047	high	8.1/10	WordPress Victo theme <= 1.4.16 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28046	high	8.1/10	WordPress Law Office theme <= 3.3.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28045	high	8.1/10	WordPress N7 \| Golf Club Sports & Events theme <= 2.16.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28043	critical	9.8/10	WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme <= 1.0.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28042	high	7.1/10	WordPress Listify plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28041	high	8.1/10	WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28039	high	7.5/10	WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28038	medium	6.5/10	WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28037	high	7.1/10	WordPress EventON plugin <= 4.9.12 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28036	medium	6.4/10	WordPress Ratatouille theme <= 1.2.6 - Server Side Request Forgery (SSRF) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28035	high	8.1/10	WordPress Printy theme <= 1.8 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28034	high	8.1/10	WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28033	high	8.1/10	WordPress Edifice theme <= 1.8 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28032	high	8.1/10	WordPress Tuning theme <= 1.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28031	high	8.1/10	WordPress Invetex theme <= 2.18 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28030	high	8.1/10	WordPress Bonbon theme <= 1.6 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28029	high	8.1/10	WordPress EmojiNation theme <= 1.0.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago