WordPress.org

Security Scorecard

Score

34D

Total CVEs

891

Patch Rate

47%

415 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium694
Low2

Patch Status

Patched415 (47%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,103)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-13066CVE-2025-13066High8.8-Patched
CVE-2025-12153CVE-2025-12153High8.8-Patched
CVE-2025-12154CVE-2025-12154High8.8-Patched
CVE-2025-12181ContentStudio Plugin VulnerabilityHigh8.8-Patched
CVE-2025-12879WordPress Plugin XSSHigh8.8-Workaround
CVE-2025-12850My Auctions Allegro Plugin XSSHigh7.5-Patched
CVE-2025-12804WordPress Booking Calendar Plugin VulnerabilityMedium6.4-Patched
CVE-2025-12163Omnipress SVG VulnerabilityMedium6.4-Patched
CVE-2025-12368Sermon Manager Plugin VulnerabilityMedium6.4-Patched
CVE-2025-13860Easy Jump Links Menus Plugin VulnerabilityMedium6.4-Patched