WordPress.org

Security Scorecard

Score

34D

Total CVEs

896

Patch Rate

47%

419 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High157
Medium698
Low2

Patch Status

Patched419 (47%)
Partial/Workaround4 (0%)
Unpatched473 (53%)

CVEs (1,108)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-12754-Medium6.434dUnpatched
CVE-2025-12644-Medium6.434dUnpatched
CVE-2025-12663-Medium6.434dUnpatched
CVE-2025-12126-Medium5.434dUnpatched
CVE-2025-12021-Medium6.134dUnpatched
CVE-2025-12019-Medium4.434dUnpatched
CVE-2025-11882-Medium6.434dUnpatched
CVE-2025-11891-Medium5.334dUnpatched
CVE-2025-11986-Medium5.334dUnpatched
CVE-2025-11886-Medium4.334dUnpatched