744 CVEs
5 in CISA KEV
WordPress Vulnerabilities
CVE security advisories and vulnerability history for WordPress.
744
Total CVEs
Published
5
In CISA KEV
Exploited in the wild
362
Public exploits
PoC or exploit code
CVE security advisories and vulnerability history for WordPress.
WordPress has 744 published CVE records since 2005, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 362 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.
A quick read on WordPress's vulnerability posture, as a share of its 744 published CVEs.
across 744 scored CVEs
212 of 744 scored
5 of 744 CVEs
362 of 744 CVEs
426 of 744 CVEs
How the CVSS severity of WordPress's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
5
5 of WordPress's CVEs are confirmed exploited in the wild.
Public exploits
362
362 of WordPress's CVEs have a known public exploit available.
The WordPress products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in WordPress CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish WordPress CVE records.
How many WordPress CVEs were published each year.
The most recently disclosed vulnerabilities affecting WordPress.
CVE counts for other vendors.
Common questions about WordPress vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new WordPress CVE, with AI-written analysis and remediation steps.
Get an alert for each new WordPress CVE, with AI-written analysis and remediation steps.
Monitor WordPress CVEs