WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-14047WP User Frontend Plugin XSSMedium5.3-Patched
CVE-2025-14998Branda Plugin Privilege EscalationCritical9.8-Patched
CVE-2025-14913Frontend Post Submission Manager Lite Plugin XSSMedium5.3-Patched
CVE-2025-68599Improper Neutralization of XSSMedium5.40dPatched
CVE-2025-68602PayPal Easy-Paypal-Donation Open RedirectMedium6.11dPatched
CVE-2025-13773WooCommerce Plugin XSSCritical9.8-Patched
CVE-2025-68511Jegstudio Gutenverse Form VulnerabilityCritical9.1-Patched
CVE-2025-68521WpStream VulnerabilityHigh8.82dUnpatched
CVE-2025-68522WpStream Plugin VulnerabilityHigh8.8-Patched
CVE-2025-68573CVE-2025-68573High8.8-Patched