WordPress
WordPress known exploited vulnerabilities
Every WordPress vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first.
6 CVEs
- CVE-2026-87902WordPress Core Remote File Inclusion Vulnerability · added September 25, 2026
- CVE-2026-63030WordPress Core Interpretation Conflict Vulnerability · added July 21, 2026
- CVE-2026-60137WordPress Core SQL Injection Vulnerability · added July 21, 2026
- CVE-2020-25213WordPress File Manager Plugin Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-11738WordPress Snap Creek Duplicator Plugin File Download Vulnerability · added November 3, 2021
- CVE-2019-9978WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).