WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-49045Highwarden Super Interactive Maps Plugin XSSMedium6.1-Patched
CVE-2025-49249ApusTheme Drone XSSMedium6.1-Patched
CVE-2025-52746ayecode Restaurante Theme Cross-site Scripting VulnerabilityMedium6.1-Patched
CVE-2025-53240WordPress Plugin XSSMedium6.1-Patched
CVE-2025-63018Bard Theme Broken Access Control VulnerabilityHigh8.8-Patched
CVE-2025-66135Merkulove Imager for Elementor Plugin VulnerabilityHigh8.8-Patched
CVE-2025-69050Edge-Themes Overworld Remote File InclusionHigh8.1-Patched
CVE-2025-69185Hotel Listing Plugin VulnerabilityHigh7.35dUnpatched
CVE-2025-69318JobWP XSSHigh7.1-Patched
CVE-2026-22347Carousel Horizontal Posts Content Slider XSSMedium6.5-Patched