WordPress.org

Security Scorecard

Score

34D

Total CVEs

895

Patch Rate

47%

418 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium698
Low2

Patch Status

Patched418 (47%)
Partial/Workaround4 (0%)
Unpatched473 (53%)

CVEs (1,107)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-62965Wordpress Admin Management Xtended VulnerabilityHigh7.286dUnpatched
CVE-2025-62969Cross-site Scripting in NextMove Lite woo-thank-you-page-nextmove-liteMedium6.586dUnpatched
CVE-2025-62982Cross-site Scripting in Dynamic User DirectoryMedium5.486dUnpatched
CVE-2025-62988Slider Template SSRF VulnerabilityMedium4.986dUnpatched
CVE-2025-48088WPBakery Page Builder XSS VulnerabilityMedium6.586dUnpatched
CVE-2025-9322-High7.553dUnpatched
CVE-2025-11269-Medium5.355dUnpatched
CVE-2025-11879-Medium6.555dUnpatched
CVE-2025-11760-Medium5.355dUnpatched
CVE-2025-11823-Medium6.455dUnpatched