WordPress.org

Security Scorecard

Score

33D

Total CVEs

883

Patch Rate

46%

408 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High152
Medium690
Low2

Patch Status

Patched408 (46%)
Partial/Workaround4 (0%)
Unpatched471 (53%)

CVEs (1,096)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-23469Sleekplan Cross-site Scripting VulnerabilityN/A-22dUnpatched
CVE-2025-69016Phlox Theme Auxin-Elements VulnerabilityN/A-22dUnpatched
CVE-2025-49342Wolfgang Häfelinger Custom Style CSRFN/A-21dUnpatched
CVE-2025-49343Social Profilr CSRF VulnerabilityN/A-21dUnpatched
CVE-2025-49344Rene SensitiveTagCloud CSRFN/A-21dUnpatched
CVE-2025-49353Marcin Kijak Noindex by Path VulnerabilityN/A-21dUnpatched
CVE-2025-63005Tomas WordPress Tooltips XSSN/A-21dUnpatched
CVE-2025-62743MyBookTable Bookstore XSSN/A-21dUnpatched
CVE-2025-62096WPFactory Maximum Products per User for WooCommerce XSS VulnerabilityN/A-21dUnpatched
CVE-2025-62134WP Life Contact Form Widget CSRFN/A-21dUnpatched