← Back to Vendors

Wordpress.Org

Security Scorecard

Score

29 C

Based on 322,630 CVEs processed. Coverage: 99.5% CRITICAL, 165.6% HIGH, 185.4% MEDIUM.

Total CVEs

540

Avg Response

43 days

Patch Rate

20%

Critical Gaps

9

Severity Breakdown

Critical9
High40
Medium489
Low2

Patch Status

Patched106 (20%)
Partial/Workaround0 (0%)
Not Available434 (80%)

Recent CVEs

CVE ID Title Severity Score Days Patch
CVE-2025-10646 Search Exclude Plugin Vulnerability... MEDIUM 4.3 20d Not Available
CVE-2025-13385 Bookme Free Online Appointment Booking S... MEDIUM 4.9 20d Not Available
CVE-2025-12587 Peer Publish Plugin Vulnerability... MEDIUM 4.3 20d Not Available
CVE-2025-12634 WooCommerce Refund Request Plugin Vulner... MEDIUM 4.3 20d Not Available
CVE-2025-12628 WP 2FA WordPress Vulnerability... MEDIUM 6.3 21d Not Available
CVE-2025-12800 WP Shortcodes Vulnerability... MEDIUM 6.4 22d Not Available
CVE-2025-13526 OneClick WhatsApp Order Plugin Vulnerabi... HIGH 7.5 21d Not Available
CVE-2025-11186 XSS... MEDIUM 6.4 23d Not Available
CVE-2025-12877 IDonate Plugin Vulnerability... MEDIUM 5.3 - Available
CVE-2025-13317 Appointment Booking Calendar Plugin Vuln... MEDIUM 5.3 23d Not Available