netVigilance Vulnerability intelligence since 2004

WordPress

6 WordPress vulnerabilities with confirmed exploitation in the wild, as published by CISA; 6 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for WordPress
Vulnerability Status
overdue 8d2026-09-28 CVE-2026-87902 WordPress / Core WordPress Core Remote File Inclusion Vulnerability 2026-09-25 8.1 past due
overdue 74d2026-07-24 CVE-2026-63030 WordPress / Core WordPress Core Interpretation Conflict Vulnerability 2026-07-21 9.8 past due
overdue 63d2026-08-04 CVE-2026-60137 WordPress / Core WordPress Core SQL Injection Vulnerability 2026-07-21 5.9 past due
overdue 1617d2022-05-03 CVE-2020-25213 WordPress / File Manager Plugin WordPress File Manager Plugin Remote Code Execution Vulnerability 2021-11-03 9.8 past due
overdue 1617d2022-05-03 CVE-2020-11738 WordPress / Snap Creek Duplicator Plugin WordPress Snap Creek Duplicator Plugin File Download Vulnerability 2021-11-03 7.5 past due
overdue 1617d2022-05-03 CVE-2019-9978 WordPress / Social Warfare Plugin WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability 2021-11-03 6.1 past due