WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-9346-Medium6.4111dUnpatched
CVE-2025-9277-Medium6.4113dUnpatched
CVE-2025-9172-High7.5113dUnpatched
CVE-2025-9331-Medium4.3117dUnpatched
CVE-2025-7808WP Shopify XSSMedium6.1-Patched
CVE-2025-7965CBX Restaurant Booking WordPress Plugin XSSMedium4.3-Patched
CVE-2015-10144-High8.8144dPatched
CVE-2015-10133-High7.2157dUnpatched
CVE-2025-4691WordPress Plugin XSSMedium5.3-Patched
CVE-2025-2524Ninja Forms WordPress Plugin XSSMedium4.8-Patched