WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-10915Dreamer Blog WordPress Theme VulnerabilityCritical9.8-Patched
CVE-2023-54332Jetpack XSSMedium6.1-Patched
CVE-2023-54333CVE-2023-54333High8.2-Patched
CVE-2025-14579Quiz Maker WordPress Plugin VulnerabilityMedium4.80dUnpatched
CVE-2025-14948CVE-2025-14948Medium5.3-Patched
CVE-2025-14976WordPress User Registration & Membership Plugin VulnerabilityMedium5.4-Patched
CVE-2026-0831Templately Plugin XSSMedium5.3-Patched
CVE-2025-14506ConvertForce Popup Builder VulnerabilityMedium6.4-Patched
CVE-2025-14555Widget Countdown Plugin VulnerabilityMedium6.4-Patched
CVE-2025-12379Phlox Theme Plugin XSSMedium6.4-Patched