WordPress.org
Security Scorecard
Score
34D
Total CVEs
888
Patch Rate
46%
412 patched
Avg Response
104d
days to patch
Critical Gaps
8
exploitable, no detection
Severity Breakdown
Critical39
High156
Medium691
Low2
Patch Status
Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)
CVEs (1,100)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2024-50436 | PHP Remote File Inclusion Vulnerability in Clean Retina Theme | High | 7.5 | - | Patched |
| CVE-2024-50498 | WP Query Console RCE | Critical | 10.0 | - | Patched |
| CVE-2024-9932 | Wux Blog Editor Plugin XSS | Critical | 9.8 | - | Workaround |
| CVE-2016-15040 | - | Critical | 9.8 | 433d | Unpatched |
| CVE-2017-20192 | - | High | 8.3 | 433d | Patched |
| CVE-2019-25216 | - | High | 7.2 | 433d | Unpatched |
| CVE-2024-47313 | CVE-2024-47313 | Medium | 5.1 | - | Patched |
| CVE-2024-47352 | WP Bulk Delete XSS | High | 7.1 | - | Patched |
| CVE-2024-43918 | - | Critical | 10.0 | 481d | Patched |
| CVE-2024-37472 | WofficeIO Woffice Reflected XSS | High | 7.1 | - | Patched |