WordPress.org

Security Scorecard

Score

33D

Total CVEs

883

Patch Rate

46%

408 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High152
Medium690
Low2

Patch Status

Patched408 (46%)
Partial/Workaround4 (0%)
Unpatched471 (53%)

CVEs (1,096)

CVE IDTitleSeverityScoreDaysPatch
CVE-2026-24559CF7 HubSpot VulnerabilityMedium5.43dUnpatched
CVE-2026-24535Automatic Featured Images from Videos VulnerabilityMedium4.33dUnpatched
CVE-2026-24579WP ai-image-alt-text-generator-for-WP Plugin VulnerabilityMedium4.3-Patched
CVE-2026-24567briarinc Anything Order by Terms VulnerabilityMedium4.3-Patched
CVE-2026-24523WP FullCalendar Plugin XSSHigh7.5-Patched
CVE-2026-24542WP Term Order Plugin XSSMedium4.3-Patched
CVE-2026-24549GeoDirectory CSRFMedium4.3-Patched
CVE-2026-24623Neoforum Plugin XSSMedium6.5-Patched
CVE-2026-0920LA-Studio Element Kit for Elementor Plugin VulnerabilityCritical9.8-Patched
CVE-2026-22359Wordpress Movies Bulk Importer CSRF VulnerabilityMedium4.30dUnpatched