WordPress.org
Security Scorecard
Score
34D
Total CVEs
888
Patch Rate
46%
412 patched
Avg Response
104d
days to patch
Critical Gaps
8
exploitable, no detection
Severity Breakdown
Critical39
High156
Medium691
Low2
Patch Status
Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)
CVEs (1,100)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-9888 | - | Medium | 4.3 | 97d | Unpatched |
| CVE-2025-9622 | - | Medium | 4.3 | 97d | Unpatched |
| CVE-2025-9489 | - | Medium | 5.0 | 98d | Unpatched |
| CVE-2025-9111 | - | Low | 3.5 | 99d | Patched |
| CVE-2025-9058 | - | Medium | 6.4 | 99d | Unpatched |
| CVE-2025-9853 | - | Medium | 6.4 | 101d | Unpatched |
| CVE-2025-9515 | - | High | 7.2 | 101d | Unpatched |
| CVE-2025-9493 | - | Medium | 6.4 | 101d | Unpatched |
| CVE-2025-9085 | - | Medium | 4.9 | 102d | Unpatched |
| CVE-2025-9990 | - | High | 8.1 | 100d | Unpatched |