WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-13975WordPress Plugin XSSMedium4.4-Patched
CVE-2025-14035DebateMaster Plugin XSS VulnerabilityMedium4.4-Patched
CVE-2025-14048WordPress Plugin XSSMedium4.4-Patched
CVE-2025-12783Premmerce Brands for WooCommerce Plugin XSSMedium4.3-Patched
CVE-2025-13363WordPress Plugin XSSMedium4.3-Patched
CVE-2025-13366Rabbit Hole Plugin VulnerabilityMedium4.3-Patched
CVE-2025-13408Foxtool All-in-One VulnerabilityMedium4.3-Patched
CVE-2025-13987Purchase and Expense Manager Plugin VulnerabilityMedium4.3-Patched
CVE-2025-14045URL Media Uploader Plugin VulnerabilityMedium4.3-Patched
CVE-2025-14062CVE-2025-14062Medium4.3-Patched