WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-15364WordPress Download Manager Plugin Privilege EscalationHigh7.3-Unpatched
CVE-2025-12067WordPress Table Field Add-on VulnerabilityMedium6.4-Patched
CVE-2025-14371CVE-2025-14371Medium4.3-Patched
CVE-2025-9637QSM VulnerabilityMedium6.5-Patched
CVE-2025-69084GT3 Photo Gallery XSSHigh7.1-Patched
CVE-2025-69085JobBank Plugin XSSHigh7.1-Patched
CVE-2025-69334WPFactory Wishlist for WooCommerce XSSMedium6.5-Patched
CVE-2025-69349Fahad Mahmood RSS Feed WidgetMedium5.4-Patched
CVE-2025-69354BBR Plugin Broken Access Control VulnerabilityMedium5.4-Patched
CVE-2025-14124Team WordPress Plugin VulnerabilityHigh8.60dUnpatched