WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-32154Catch Dark Mode PHP Remote File InclusionHigh7.5-Patched
CVE-2024-13704CVE-2024-13704High7.2-Patched
CVE-2024-13352Legull WordPress Plugin XSSHigh7.1-Patched
CVE-2024-12774AltaSide Menu XSSMedium6.5-Patched
CVE-2024-11613-Critical9.8-Patched
CVE-2024-37451Travel Agency Theme CSRF VulnerabilityMedium4.3371dUnpatched
CVE-2024-10124-Critical9.8367dUnpatched
CVE-2024-10709YaDisk Files WordPress Plugin VulnerabilityMedium6.8410dUnpatched
CVE-2024-9828Taskbuilder WordPress Plugin XSSMedium4.1-Patched
CVE-2024-50526mahlamusa Multi Purpose Mail Form VulnerabilityCritical10.0445dUnpatched