Feed live

WordPress vulnerabilities - every known CVE affecting WordPress core, plugins, and themes

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every CVE that affects WordPress core, plugins, themes, and page builders. Scored and updated from the official NVD feed.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

703

Newly disclosed

Feed last synced

13 hrs ago

Data freshness

Showing 241–270 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2016-20074	medium	5.3/10	WordPress Lazy Content Slider Plugin 3.4 CSRF	Jun 15, 2026 12d ago
CVE-2016-20073	high	8.8/10	Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php	Jun 15, 2026 12d ago
CVE-2016-20072	high	8.8/10	BBS e-Franchise 1.1.1 WordPress Plugin SQL Injection via uid	Jun 15, 2026 12d ago
CVE-2016-20071	high	8.8/10	WordPress 404 Redirection Manager Plugin 1.0 SQL Injection	Jun 15, 2026 12d ago
CVE-2016-20070	medium	5.1/10	WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS	Jun 15, 2026 12d ago
CVE-2016-20069	high	8.8/10	WordPress Booking Calendar Contact Form 1.0.23 SQL Injection	Jun 15, 2026 12d ago
CVE-2016-20067	medium	5.3/10	WordPress CP Polls 1.0.8 Cross-Site Request Forgery	Jun 15, 2026 12d ago
CVE-2016-20066	medium	5.1/10	WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting	Jun 15, 2026 12d ago
CVE-2026-9848	high	7.5/10	WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter	Jun 13, 2026 14d ago
CVE-2026-24618	medium	4.3/10	WordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerability	Jun 12, 2026 15d ago
CVE-2026-9125	medium	6.4/10	The Ultimate Video Player For WordPress <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute	Jun 12, 2026 15d ago
CVE-2026-42653	high	7.1/10	WordPress SliceWP plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Jun 11, 2026 16d ago
CVE-2026-39494	critical	9.3/10	WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability	Jun 11, 2026 16d ago
CVE-2026-42647	critical	9.3/10	WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability	Jun 11, 2026 16d ago
CVE-2026-49060	critical	9.8/10	WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability	Jun 11, 2026 16d ago
CVE-2023-32959	medium	4.3/10	WordPress MetroStore theme <= 1.3.2 - Broken Access Control	Jun 11, 2026 16d ago
CVE-2023-25969	medium	5.4/10	WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken Access Control vulnerability	Jun 11, 2026 16d ago
CVE-2022-47150	medium	4.3/10	WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability	Jun 11, 2026 16d ago
CVE-2022-45813	medium	5.4/10	WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Control + CSRF	Jun 11, 2026 16d ago
CVE-2022-44630	medium	4.6/10	WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF)	Jun 11, 2026 16d ago
CVE-2022-42479	medium	5.4/10	WordPress Soledad premium theme <= 8.2.5 - Broken Access Control vulnerability	Jun 11, 2026 16d ago
CVE-2023-40200	medium	5.3/10	WordPress WP Logo Showcase Responsive Slider and Carousel plugin <= 3.6 - Broken Access Control vulnerability	Jun 11, 2026 16d ago
CVE-2024-32110	medium	4.3/10	WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability	Jun 11, 2026 16d ago
CVE-2023-33999	high	7.1/10	WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jun 11, 2026 16d ago
CVE-2026-49069	high	7.1/10	WordPress WPZOOM Portfolio plugin <= 1.4.21 - Cross Site Scripting (XSS) vulnerability	Jun 10, 2026 17d ago
CVE-2017-20251	critical	9.3/10	WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API	Jun 9, 2026 18d ago
CVE-2017-20250	high	8.7/10	WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File Download	Jun 9, 2026 18d ago
CVE-2017-20249	high	8.8/10	WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection	Jun 9, 2026 18d ago
CVE-2017-20248	high	8.7/10	WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download	Jun 9, 2026 18d ago
CVE-2017-20247	high	8.8/10	WordPress Plugin PICA Photo Gallery 1.0 SQL Injection	Jun 9, 2026 18d ago