WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-14450Wallet System for WooCommerce Plugin VulnerabilityMedium6.5-Patched
CVE-2025-15403RegistrationMagic Plugin VulnerabilityCritical9.8-Patched
CVE-2026-0820CVE-2026-0820Medium5.3-Patched
CVE-2025-12825Contact Form 7 Plugin VulnerabilityMedium5.3-Patched
CVE-2025-14029WordPress Community Events Plugin VulnerabilityMedium5.3-Patched
CVE-2025-12984Advanced Ads – Ad Manager & AdSense SQL Injection VulnerabilityMedium4.9-Patched
CVE-2026-0691CVE-2026-0691Medium4.4-Patched
CVE-2026-0808Spin Wheel Plugin VulnerabilityMedium5.3-Patched
CVE-2025-14078WooCommerce PAYGENT VulnerabilityMedium5.3-Patched
CVE-2025-12641Awesome Support HelpDesk & Support Plugin VulnerabilityMedium6.5-Patched