WordPress.org
Security Scorecard
Score
29C
Total CVEs
540
Patch Rate
20%
106 patched
Avg Response
43d
days to patch
Critical Gaps
9
exploitable, no detection
Severity Breakdown
Critical9
High40
Medium489
Low2
Patch Status
Patched106 (20%)
Partial/Workaround0 (0%)
Unpatched434 (80%)
CVEs (632)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-11880 | SM CountDown Widget Plugin Vulnerability | MEDIUM | 6.4 | 58d | Unpatched |
| CVE-2025-11870 | WordPress Simple Business Data Plugin Vulnerability | MEDIUM | 6.4 | 58d | Unpatched |
| CVE-2025-11830 | WP Restaurant Listings Plugin Vulnerability | MEDIUM | 6.4 | 58d | Unpatched |
| CVE-2025-11824 | Cinza Grid Plugin Vulnerability | MEDIUM | 6.4 | 58d | Unpatched |
| CVE-2025-5983 | Meta Tag Manager WordPress Plugin Vulnerability | MEDIUM | 6.5 | 58d | Patched |
| CVE-2025-11811 | Wordpress Shortcode Vulnerability | MEDIUM | 6.4 | 58d | Unpatched |
| CVE-2025-12033 | Simple Banner WordPress Plugin Vulnerability | MEDIUM | 4.4 | 58d | Unpatched |
| CVE-2025-10651 | Welcart e-Commerce Plugin Vulnerability | MEDIUM | 5.5 | 58d | Unpatched |
| CVE-2025-11817 | Simple Tableau Viz Plugin Vulnerability | MEDIUM | 6.4 | 58d | Unpatched |
| CVE-2025-11813 | Responsive iframe GoogleMap Plugin Vulnerability | MEDIUM | 6.4 | 58d | Unpatched |