WordPress.org

Security Scorecard

Score

33D

Total CVEs

870

Patch Rate

46%

396 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High149
Medium680
Low2

Patch Status

Patched396 (46%)
Partial/Workaround4 (0%)
Unpatched470 (54%)

CVEs (1,095)

CVE IDTitleSeverityScoreDaysPatch
CVE-2026-1084WordPress Plugin XSSMedium4.4-Patched
CVE-2026-1088WordPress Plugin XSSMedium4.3-Patched
CVE-2026-1095Canto Testimonials Plugin XSSMedium6.4-Patched
CVE-2026-1257Wordpress Plugin XSSHigh7.5-Patched
CVE-2025-13139SurveyJS Drag & Drop WordPress Form Builder Plugin VulnerabilityMedium4.3-Patched
CVE-2025-13194CVE-2025-13194Medium4.3-Patched
CVE-2025-13205SurveyJS Drag & Drop WordPress Form Builder VulnerabilityMedium4.3-Patched
CVE-2025-14630AdminQuickbar Cross-Site Request ForgeryMedium4.30dUnpatched
CVE-2025-14907WordPress Moderate Selected Posts Plugin VulnerabilityMedium4.3-Patched
CVE-2026-0800WordPress User Submitted Posts – Enable Users to Submit Posts from the Front End Plugin VulnerabilityHigh7.2-Patched