WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-13531Stylish Order Form Builder Plugin XSSN/A--Patched
CVE-2025-13657WordPress Plugin XSSN/A--Patched
CVE-2025-13667WordPress Plugin XSSN/A--Workaround
CVE-2025-13694WordPress Plugin IP Address Spoofing VulnerabilityN/A--Patched
CVE-2025-13722Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Plugin WordPress XSSN/A--Patched
CVE-2025-13848WordPress Plugin XSSN/A--Patched
CVE-2025-13849WordPress Plugin XSSN/A--Patched
CVE-2025-13887WordPress Plugin XSSN/A--Patched
CVE-2025-13974Email Customizer for WooCommerce Plugin XSSN/A-0dUnpatched
CVE-2025-13990Mamurjor Employee Info Plugin XSSN/A--Patched