Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,503

All time

Critical · Active

12,230

CVSS ≥ 9.0

New · 14 days

3,116

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 2071–2100 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-28028	high	8.1/10	WordPress MoneyFlow theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28027	high	8.1/10	WordPress Kayon theme <= 1.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28026	high	8.1/10	WordPress Motorix theme <= 1.6 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28025	high	8.1/10	WordPress Stargaze theme <= 1.5 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28024	high	8.1/10	WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28023	high	8.1/10	WordPress Nuts theme <= 1.10 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28022	high	8.1/10	WordPress Foodie theme <= 1.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28021	high	8.1/10	WordPress Craftis theme <= 1.2.8 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28020	high	8.1/10	WordPress Chroma theme <= 1.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28019	high	8.1/10	WordPress Manoir theme <= 1.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28018	high	8.1/10	WordPress Global Logistics theme <= 3.20 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28017	high	8.1/10	WordPress Green Thumb theme <= 1.1.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28016	high	8.1/10	WordPress Luxury Wine theme <= 1.1.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28015	high	8.1/10	WordPress ShiftCV theme <= 3.0.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28014	high	8.1/10	WordPress Translogic theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28013	high	8.1/10	WordPress Kratz theme <= 1.0.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28012	high	8.1/10	WordPress Gridiron theme <= 1.0.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28011	high	8.1/10	WordPress Yottis theme <= 1.0.10 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28010	high	8.1/10	WordPress Scientia theme <= 1.2.4 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28009	high	8.1/10	WordPress DroneX theme <= 1.1.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28007	high	8.1/10	WordPress Coinpress theme <= 1.0.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-28006	high	8.1/10	WordPress Yungen theme <= 1.0.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27998	high	8.1/10	WordPress Vixus theme <= 1.0.16 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27997	high	8.1/10	WordPress Maxify theme <= 1.0.16 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27996	high	8.1/10	WordPress Lingvico theme <= 1.0.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27995	high	8.1/10	WordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27994	high	8.1/10	WordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27993	high	8.1/10	WordPress Aldo theme <= 1.0.10 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27992	high	8.1/10	WordPress Meals & Wheels theme <= 1.1.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-27991	high	8.1/10	WordPress Avventure theme <= 1.1.12 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago