WordPress.org

Security Scorecard

Score

34D

Total CVEs

888

Patch Rate

46%

412 patched

Avg Response

104d

days to patch

Critical Gaps

8

exploitable, no detection

Severity Breakdown

Critical39
High156
Medium691
Low2

Patch Status

Patched412 (46%)
Partial/Workaround4 (0%)
Unpatched472 (53%)

CVEs (1,100)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-47566ZoomSounds XSSN/A--Patched
CVE-2025-66148Merkulove Conformer for Elementor VulnerabilityN/A--Patched
CVE-2025-30633Amazon Native Shopping Recommendations Plugin SQL InjectionN/A--Patched
CVE-2025-31044WordPress Plugin SQL Injection VulnerabilityN/A--Patched
CVE-2025-68865Infility Global SQL InjectionN/A--Patched
CVE-2023-49186Machic Core Plugin XSSN/A--Patched
CVE-2025-69033WP Filter XSSN/A-6dUnpatched
CVE-2025-69089Auto Listings Cross-site Scripting VulnerabilityN/A-6dUnpatched
CVE-2025-53344ThimPress Thim Core CSRF VulnerabilityN/A--Patched
CVE-2025-14155Elementor Template Viewer VulnerabilityN/A--Patched