WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-5919WP Timetics Plugin VulnerabilityN/A--Patched
CVE-2023-47232WP Affiliate Disclosure VulnerabilityN/A-16dUnpatched
CVE-2025-12030WordPress Plugin XSSN/A--Patched
CVE-2025-12449aBlocks WordPress Gutenberg Blocks Plugin XSSN/A--Patched
CVE-2025-12540ShareThis Dashboard for Google Analytics Plugin XSSN/A--Patched
CVE-2025-13419WP Front User Submit Plugin XSSN/A--Patched
CVE-2025-13496Moosend Landing Pages Plugin XSSN/A--Patched
CVE-2025-13519SVG Map Plugin XSSN/A--Patched
CVE-2025-13521WP Status Notifier Plugin XSSN/A--Patched
CVE-2025-13529Unify Plugin WordPress Cross-Site Scripting (XSS)N/A--Patched