WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-15021CVE-2025-15021Medium4.4-Patched
CVE-2025-15266GeekyBot Plugin VulnerabilityHigh7.2-Patched
CVE-2025-15283CVE-2025-15283High7.2-Patched
CVE-2025-15377Cross-Site Request Forgery in Sosh Share Buttons PluginMedium4.3-Patched
CVE-2025-15378AJS Footnotes Plugin VulnerabilityHigh7.2-Patched
CVE-2025-15486Kunze Law Plugin VulnerabilityMedium4.4-Patched
CVE-2026-0594WordPress List Site Contributors Plugin VulnerabilityMedium6.1-Patched
CVE-2026-0694SearchWiz Plugin VulnerabilityMedium6.4-Patched
CVE-2025-14173Perfit WooCommerce Plugin VulnerabilityMedium5.3-Patched
CVE-2025-14770CVE-2025-14770High7.5-Patched