semanalmente o wordfence publica relatórios de vulnerabilidades seja em plugins, ou no WordPress em si.

https://www.wordfence.com/blog/2024/06/wordfence-intelligence-weekly-wordpress-vulnerability-report-june-17-2024-to-june-23-2024/

Eu uso esses:

https://cve.mitre.org/ CVE - Common Vulnerabilities and Exposures (CVE)

https://www.cvedetails.com/ CVE security vulnerability database. Security vulnerabilities, exploits, references and more