WordPress: known exploited vulnerabilities
6Catalog entries
0Ransomware use
2026-09-25Last added
2026-09-28Latest due date
Get an email when WordPress is next added.Watch WordPress
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2026-87902 | Core WordPress Core Remote File Inclusion Vulnerability |
2026-09-28 |
| CVE-2026-63030 | Core WordPress Core Interpretation Conflict Vulnerability |
2026-07-24 |
| CVE-2026-60137 | Core WordPress Core SQL Injection Vulnerability |
2026-08-04 |
| CVE-2019-9978 | Social Warfare Plugin WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability |
2022-05-03 |
| CVE-2020-11738 | Snap Creek Duplicator Plugin WordPress Snap Creek Duplicator Plugin File Download Vulnerability |
2022-05-03 |
| CVE-2020-25213 | File Manager Plugin WordPress File Manager Plugin Remote Code Execution Vulnerability |
2022-05-03 |