Vendor
WordPress vulnerabilities under active attack
6 WordPress vulnerabilities have confirmed evidence of exploitation in the wild.
6
confirmed exploited
0
used in ransomware
6
past fix deadline
- CVE-2026-87902 WordPress Core Remote File Inclusion Vulnerability WordPress · Core
- CVE-2026-60137 WordPress Core SQL Injection Vulnerability WordPress · Core
- CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability WordPress · Core
- CVE-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability WordPress · File Manager Plugin
- CVE-2020-11738 WordPress Snap Creek Duplicator Plugin File Download Vulnerability WordPress · Snap Creek Duplicator Plugin
- CVE-2019-9978 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability WordPress · Social Warfare Plugin