Log in Start free

WordPress.org

Products

ProductCVEsExploitedLatest
WordPress5–Oct 13, 2023
Health Check & Troubleshooting1–Dec 16, 2025
Two Factor1–Sep 30, 2026

Exploited and recent CVEs

  • CVE-2026-100508 Medium 5.3 WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability 0.3%
  • CVE-2025-64253 Medium 4.9 WordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability 0.5%
  • CVE-2023-39999 Medium 4.3 WordPress < 6.3.2 is vulnerable to Broken Access Control 1.2%
  • CVE-2023-38000 Medium 6.5 Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block 0.9%
  • CVE-2022-43497 Medium 6.1 Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all 1.3%
  • CVE-2022-43504 Medium 5.3 Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post b 1.5%
  • CVE-2022-43500 Medium 6.1 Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all 1.0%