WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-13840BUKAZU Search Widget Plugin VulnerabilityMedium6.4-Patched
CVE-2025-13843VigLink SpotLight By ShortCode VulnerabilityMedium6.4-Patched
CVE-2025-13850CVE-2025-13850Medium6.4-Patched
CVE-2025-13866Flow-Flow Social Feed Stream Plugin VulnerabilityMedium6.4-Patched
CVE-2025-13884WordPress Hide Email Address Plugin VulnerabilityMedium6.4-Patched
CVE-2025-13889Simple Nivo Slider Plugin VulnerabilityMedium6.4-Patched
CVE-2025-13906WP Flot VulnerabilityMedium6.421dUnpatched
CVE-2025-13960Gpxpress Plugin VulnerabilityMedium6.4-Patched
CVE-2025-13962Divelogs Widget Plugin XSSMedium6.4-Patched
CVE-2025-13963FX Currency Converter Plugin XSSMedium6.4-Patched