WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-14384CVE-2025-14384Medium4.3-Patched
CVE-2025-14982CVE-2025-14982Medium4.3-Patched
CVE-2025-15526CVE-2025-15526Medium5.3-Patched
CVE-2025-14793DK PDF – WordPress PDF GeneratorMedium5.0-Patched
CVE-2026-0916CVE-2026-0916Medium6.4-Patched
CVE-2025-14375RSS Aggregator VulnerabilityMedium6.1-Patched
CVE-2025-14757Cost Calculator Builder Plugin VulnerabilityMedium5.3-Patched
CVE-2026-0913CVE-2026-0913Medium6.4-Patched
CVE-2026-1004Elementor Addons Sensitive Info ExposureMedium5.3-Patched
CVE-2025-13859WordPress Plugin XSSMedium6.4-Patched