WordPress.org
Security Scorecard
Score
34D
Total CVEs
889
Patch Rate
47%
413 patched
Avg Response
104d
days to patch
Critical Gaps
8
exploitable, no detection
Severity Breakdown
Critical39
High156
Medium692
Low2
Patch Status
Patched413 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)
CVEs (1,101)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-9353 | - | Medium | 6.4 | 84d | Patched |
| CVE-2025-9487 | - | Medium | 4.7 | 85d | Patched |
| CVE-2025-58025 | Master Slider XSS | Medium | 6.5 | - | Patched |
| CVE-2025-9949 | - | Medium | 4.3 | 85d | Unpatched |
| CVE-2025-9882 | - | Medium | 6.1 | 87d | Unpatched |
| CVE-2025-9883 | - | Medium | 6.1 | 87d | Unpatched |
| CVE-2025-9891 | - | Medium | 4.3 | 90d | Unpatched |
| CVE-2025-9216 | - | High | 8.8 | 91d | Unpatched |
| CVE-2025-8999 | - | Medium | 5.3 | 91d | Unpatched |
| CVE-2025-10042 | - | Medium | 5.9 | 93d | Unpatched |