WordPress.org
Security Scorecard
Score
34D
Total CVEs
894
Patch Rate
47%
417 patched
Avg Response
104d
days to patch
Critical Gaps
8
exploitable, no detection
Severity Breakdown
Critical39
High156
Medium697
Low2
Patch Status
Patched417 (47%)
Partial/Workaround4 (0%)
Unpatched473 (53%)
CVEs (1,106)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-48096 | Freshface Custom CSS Vulnerability | Medium | 6.5 | 90d | Unpatched |
| CVE-2025-11825 | - | Medium | 6.4 | 58d | Unpatched |
| CVE-2025-11880 | - | Medium | 6.4 | 58d | Unpatched |
| CVE-2025-11870 | - | Medium | 6.4 | 58d | Unpatched |
| CVE-2025-11830 | - | Medium | 6.4 | 58d | Unpatched |
| CVE-2025-11824 | - | Medium | 6.4 | 58d | Unpatched |
| CVE-2025-5983 | - | Medium | 6.5 | 58d | Patched |
| CVE-2025-11811 | - | Medium | 6.4 | 58d | Unpatched |
| CVE-2025-12033 | - | Medium | 4.4 | 58d | Unpatched |
| CVE-2025-10651 | - | Medium | 5.5 | 58d | Unpatched |