WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-68585WP Document Revisions VulnerabilityHigh8.8-Patched
CVE-2023-36525WPJobBoard SQL Injection VulnerabilityHigh8.6-Patched
CVE-2025-67909WP Swings Membership For WooCommerce ExploitHigh8.1-Patched
CVE-2025-68581YITH Slider VulnerabilityHigh8.1-Patched
CVE-2025-67621Eight Day Week Print Workflow VulnerabilityHigh7.5-Patched
CVE-2025-68568Claspo Popup Builder Exit-Intent Pop-up VulnerabilityHigh7.5-Patched
CVE-2025-13407Gravity Forms WordPress Plugin XSSMedium6.8-Patched
CVE-2023-32120Bob Hostel Plugin XSSMedium5.9-Patched
CVE-2025-67628WordPress Plugin XSSMedium5.4-Patched
CVE-2025-68598Live Composer Page Builder XSSMedium5.4-Patched