WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-53453Hygia Theme Local File InclusionHigh8.2-Patched
CVE-2025-58879Festy PHP Remote File InclusionHigh8.2-Patched
CVE-2025-64258Wordpress Plugin VulnerabilityHigh7.534dUnpatched
CVE-2025-13439CVE-2025-13439Medium5.937dUnpatched
CVE-2025-67912Stars Testimonials XSSMedium6.5-Patched
CVE-2025-12834CVE-2025-12834Medium6.121dUnpatched
CVE-2025-10583-Low3.56dUnpatched
CVE-2025-12963CVE-2025-12963Critical9.8-Patched
CVE-2025-12824CVE-2025-12824High8.8-Patched
CVE-2025-14044WordPress Plugin XSSHigh8.1-Patched