WordPress.org

Security Scorecard

Score

34D

Total CVEs

896

Patch Rate

47%

419 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High157
Medium698
Low2

Patch Status

Patched419 (47%)
Partial/Workaround4 (0%)
Unpatched473 (53%)

CVEs (1,108)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-11988-Medium5.334dUnpatched
CVE-2025-12589-Medium6.134dUnpatched
CVE-2025-11996-Medium5.334dUnpatched
CVE-2025-11129-Medium6.434dUnpatched
CVE-2025-11805-Medium6.434dUnpatched
CVE-2025-11860-Medium6.435dUnpatched
CVE-2025-11869-Medium6.435dUnpatched
CVE-2025-11874-Medium5.435dUnpatched
CVE-2025-11829-Medium6.438dUnpatched
CVE-2025-12092-Medium6.538dUnpatched