WordPress.org

Security Scorecard

Score

34D

Total CVEs

887

Patch Rate

46%

411 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium690
Low2

Patch Status

Patched411 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,099)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-14468WordPress Plugin XSSN/A--Patched
CVE-2025-14626QR Code for WooCommerce Order Emails VulnerabilityN/A-0dUnpatched
CVE-2025-14792Key Figures Plugin VulnerabilityN/A-0dUnpatched
CVE-2025-14796My Album Gallery Plugin VulnerabilityN/A-0dUnpatched
CVE-2025-14835WP Photo Album Plus Reflected XSSN/A-0dUnpatched
CVE-2025-14845NS IE Compatibility Fixer Plugin VulnerabilityN/A-0dUnpatched
CVE-2025-14867Flashcard Plugin VulnerabilityN/A-0dUnpatched
CVE-2025-14887Twinklesmtp VulnerabilityN/A-0dUnpatched
CVE-2025-14891WooCommerce Customer Reviews VulnerabilityN/A-0dUnpatched
CVE-2025-14999Wordfence WordPress Plugin VulnerabilityN/A-0dUnpatched