WordPress.org

Security Scorecard

Score

34D

Total CVEs

891

Patch Rate

47%

415 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium694
Low2

Patch Status

Patched415 (47%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,103)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-13678Thai Lottery Widget Plugin VulnerabilityMedium6.4-Patched
CVE-2025-13739CryptX Plugin XSS VulnerabilityMedium6.4-Patched
CVE-2025-13621Dream Gallery Plugin VulnerabilityMedium6.1-Patched
CVE-2025-13622Jabbernotification Plugin VulnerabilityMedium6.1-Patched
CVE-2025-13623Twitscription Plugin VulnerabilityMedium6.129dUnpatched
CVE-2025-13625WP-SOS-Donate VulnerabilityMedium6.1-Patched
CVE-2025-13515Nouri.sh Newsletter Plugin VulnerabilityMedium6.129dUnpatched
CVE-2025-12191WooCommerce Plugin XSSMedium5.4-Patched
CVE-2025-13006SurveyFunnel XSSMedium5.3-Patched
CVE-2025-13312WordPress Plugin XSSMedium5.3-Patched