WordPress.org
Security Scorecard
Score
34D
Total CVEs
895
Patch Rate
47%
418 patched
Avg Response
104d
days to patch
Critical Gaps
8
exploitable, no detection
Severity Breakdown
Critical39
High156
Medium698
Low2
Patch Status
Patched418 (47%)
Partial/Workaround4 (0%)
Unpatched473 (53%)
CVEs (1,107)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-60207 | Addify Custom User Registration Fields for WooCommerce Vulnerability | Critical | 10.0 | 76d | Unpatched |
| CVE-2025-62030 | td-composer | Medium | 6.5 | 76d | Unpatched |
| CVE-2025-62034 | Togo Theme Privilege Escalation | High | 8.8 | 76d | Unpatched |
| CVE-2025-62036 | Togo Theme XSS Vulnerability | High | 7.1 | 76d | Unpatched |
| CVE-2025-62055 | Academist Theme Remote File Inclusion Vulnerability | High | 8.1 | 76d | Unpatched |
| CVE-2025-62066 | PHP Remote File Inclusion Vulnerability in Revolution Theme | High | 7.4 | 76d | Unpatched |
| CVE-2025-64198 | Easy Social Share Buttons Cross-site Scripting | High | 7.1 | 76d | Unpatched |
| CVE-2025-12677 | - | Medium | 5.3 | 41d | Unpatched |
| CVE-2025-12675 | - | Medium | 4.3 | 41d | Unpatched |
| CVE-2025-11373 | - | Medium | 4.3 | 41d | Unpatched |