Feed live

WordPress vulnerabilities - every known CVE across core, plugins, and themes

WordPress's attack surface comes mostly from its plugin and theme ecosystem, not core itself. Every disclosed CVE is scored, classified, and cross-referenced against the components that caused it.

Total CVEs tracked

349,503

All time

Critical · Active

12,230

CVSS ≥ 9.0

New · 14 days

3,116

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 2191–2220 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-22441	high	8.1/10	WordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22440	high	7.1/10	WordPress Thecs theme <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22439	high	8.1/10	WordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22438	high	7.1/10	WordPress TheBi theme <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22437	high	8.1/10	WordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22436	high	8.1/10	WordPress Helvig theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22435	high	8.1/10	WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22434	high	8.1/10	WordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22433	high	8.1/10	WordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22432	high	8.1/10	WordPress Woopy theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22431	high	8.1/10	WordPress Wabi-Sabi theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22429	high	8.1/10	WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22428	high	8.1/10	WordPress Tooth Fairy theme <= 1.16 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22427	high	8.1/10	WordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22425	high	8.1/10	WordPress Sweet Jane theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22424	high	8.1/10	WordPress Shaha theme <= 1.1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22423	high	8.1/10	WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22421	high	8.1/10	WordPress Quantum theme <= 1.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22420	high	8.1/10	WordPress Horizon theme <= 1.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22419	high	8.1/10	WordPress Honor theme <= 2.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22418	high	8.1/10	WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22417	critical	9.8/10	WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22416	high	8.1/10	WordPress FixTeam theme <= 1.5.0 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22415	high	8.1/10	WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22414	high	8.1/10	WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22413	high	8.1/10	WordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22412	high	8.1/10	WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22410	high	8.1/10	WordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22408	high	8.1/10	WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago
CVE-2026-22405	high	8.1/10	WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability	Mar 5, 2026 5mo ago