WordPress.org

Security Scorecard

Score

33D

Total CVEs

870

Patch Rate

46%

396 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High149
Medium680
Low2

Patch Status

Patched396 (46%)
Partial/Workaround4 (0%)
Unpatched470 (54%)

CVEs (1,095)

CVE IDTitleSeverityScoreDaysPatch
CVE-2026-1098CVE-2026-1098Medium6.4-Patched
CVE-2026-1208Welcart Plugin VulnerabilityMedium4.3-Patched
CVE-2026-1300Responsive Header Plugin VulnerabilityMedium4.4-Patched
CVE-2026-1302Meta-box GalleryMeta Plugin VulnerabilityMedium4.4-Patched
CVE-2026-0862Wordpress Plugin XSSMedium6.1-Patched
CVE-2026-24636Sugar Calendar Lite VulnerabilityMedium4.30dUnpatched
CVE-2025-14947Bunny Stream Plugin XSSMedium6.5-Patched
CVE-2026-24587AJAX Hits Counter + Popular Posts Widget VulnerabilityMedium5.4-Patched
CVE-2026-24589Cargus eCommerce Sensitive Data ExposureMedium5.30dUnpatched
CVE-2026-24591Yoast SEO FAQ Block to Accordion XSSMedium5.4-Patched