WordPress.org

Security Scorecard

Score

33D

Total CVEs

870

Patch Rate

46%

396 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High149
Medium680
Low2

Patch Status

Patched396 (46%)
Partial/Workaround4 (0%)
Unpatched470 (54%)

CVEs (1,095)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-14609WordPress Plugin XSSMedium5.3-Patched
CVE-2025-14629WordPress Plugin XSSMedium5.3-Patched
CVE-2025-14797WordPress Plugin XSSMedium5.4-Patched
CVE-2025-14903WordPress Plugin XSSMedium4.3-Patched
CVE-2025-14906WP Youtube Video Gallery Plugin XSSMedium4.3-Patched
CVE-2025-14941GZSEO Plugin Cross-Site Scripting VulnerabilityMedium6.40dUnpatched
CVE-2025-14985Alpha Blocks Plugin XSSMedium6.4-Patched
CVE-2026-0806WP-ClanWars Plugin SQL InjectionMedium4.9-Patched
CVE-2026-1070WordPress Plugin XSSMedium4.3-Patched
CVE-2026-1075ZT Captcha Plugin XSSMedium4.3-Patched