WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-68010Netgsm Reflected XSSHigh7.16dUnpatched
CVE-2025-69073PHP Remote File Inclusion Vulnerability in Piqes ThemeHigh8.1-Patched
CVE-2025-67967Lawyer Directory Plugin VulnerabilityHigh7.6-Patched
CVE-2025-69102WP Test Email Plugin XSSHigh7.1-Patched
CVE-2025-67963Movie Booking Plugin XSSHigh8.6-Patched
CVE-2025-67615PHP Remote File Inclusion Vulnerability in Myour ThemeHigh8.1-Patched
CVE-2025-67626WP SEO Search Plugin XSSMedium4.3-Patched
CVE-2025-67956Wordpress Plugin XSSHigh8.2-Patched
CVE-2025-68004My Post Order XSSHigh7.1-Patched
CVE-2025-14978PeachPay WooCommerce Plugin XSSMedium5.3-Patched