WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-13886LT Unleashed Plugin VulnerabilityHigh7.5-Patched
CVE-2025-14169FunnelKit - Funnel Builder for WooCommerce Checkout Plugin VulnerabilityHigh7.5-Patched
CVE-2025-12570Fancy Product Designer SVG VulnerabilityHigh7.2-Patched
CVE-2025-13320WP User Manager Plugin VulnerabilityMedium6.8-Patched
CVE-2025-14064BuddyTask Plugin XSSMedium6.5-Patched
CVE-2025-13891WordPress Plugin XSSMedium6.5-Patched
CVE-2025-12960WordPress Plugin XSSMedium6.5-Workaround
CVE-2025-12650WordPress Simple Post Listing Plugin VulnerabilityMedium6.4-Patched
CVE-2025-12830CVE-2025-12830Medium6.4-Patched
CVE-2025-13747NewStatPress Plugin VulnerabilityMedium6.4-Patched