WordPress.org

Security Scorecard

Score

34D

Total CVEs

890

Patch Rate

47%

414 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium693
Low2

Patch Status

Patched414 (47%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,102)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-12510Widgets for Google Reviews Plugin VulnerabilityHigh7.2-Patched
CVE-2025-12499Rich Shortcodes for Google Reviews Plugin VulnerabilityHigh7.2-Patched
CVE-2025-12715WordPress Plugin XSSMedium6.4-Patched
CVE-2025-12717WordPress Plugin XSSMedium6.4-Patched
CVE-2025-13656Cute News Ticker Plugin XSSMedium6.4-Patched
CVE-2025-13856WordPress Plugin XSSMedium6.4-Patched
CVE-2025-13857Yet Another WebClap for WordPress XSSMedium6.4-Patched
CVE-2025-13863RevInsite Plugin XSSMedium6.4-Patched
CVE-2025-13896WordPress Social Feed Gallery Portfolio Plugin VulnerabilityMedium6.428dUnpatched
CVE-2025-13898Ultra Skype Button Plugin VulnerabilityMedium6.428dUnpatched