WordPress.org
Security Scorecard
Score
34D
Total CVEs
895
Patch Rate
47%
418 patched
Avg Response
104d
days to patch
Critical Gaps
8
exploitable, no detection
Severity Breakdown
Critical39
High156
Medium698
Low2
Patch Status
Patched418 (47%)
Partial/Workaround4 (0%)
Unpatched473 (53%)
CVEs (1,107)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-13317 | - | Medium | 5.3 | 23d | Unpatched |
| CVE-2025-13318 | - | Medium | 5.3 | 23d | Unpatched |
| CVE-2025-11985 | - | High | 8.8 | 22d | Unpatched |
| CVE-2025-12138 | - | High | 8.8 | 22d | Unpatched |
| CVE-2025-13138 | - | High | 7.5 | 22d | Unpatched |
| CVE-2025-12135 | - | High | 7.2 | 22d | Unpatched |
| CVE-2025-66091 | Stylish Cost Calculator XSS | Medium | 6.5 | 61d | Unpatched |
| CVE-2025-11763 | - | Medium | 6.4 | 24d | Unpatched |
| CVE-2025-11765 | - | Medium | 6.4 | 24d | Unpatched |
| CVE-2025-11767 | - | Medium | 6.4 | 24d | Unpatched |