WordPress.org
Security Scorecard
Score
21F
Total CVEs
526
Patch Rate
2%
8 patched
Avg Response
-
days to patch
Critical Gaps
9
exploitable, no detection
Severity Breakdown
Critical6
High35
Medium483
Low2
Patch Status
Patched8 (2%)
Partial/Workaround0 (0%)
Unpatched518 (98%)
CVEs (618)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-14378 | Quick Testimonials Plugin Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-14440 | Jay Login & Register Plugin Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-14454 | Image Slider Cross-Site Request Forgery | N/A | - | 2d | Unpatched |
| CVE-2025-14462 | Lucky Draw Contests Plugin Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-14508 | MediaCommander Plugin Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-14539 | Shortcode Ajax Plugin Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-7960 | King Addons Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-8617 | YITH WooCommerce Quick View Plugin Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-8687 | Enter Addons Vulnerability | N/A | - | 2d | Unpatched |
| CVE-2025-8779 | WidgetKit Vulnerability | N/A | - | 2d | Unpatched |