WordPress

3 known vulnerabilities in WordPress, 1 critical, 3 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-87902 CVSS 8.1 high · actively exploited WordPress Core Remote File Inclusion Vulnerability
  • CVE-2026-63030 CVSS 9.8 critical · actively exploited WordPress Core Interpretation Conflict Vulnerability
  • CVE-2026-60137 CVSS 5.9 medium · actively exploited WordPress Core SQL Injection Vulnerability

Latest vulnerabilities

  • CVE-2026-87902 CVSS 8.1 high · actively exploited WordPress Core Remote File Inclusion Vulnerability
  • CVE-2026-63030 CVSS 9.8 critical · actively exploited WordPress Core Interpretation Conflict Vulnerability
  • CVE-2026-60137 CVSS 5.9 medium · actively exploited WordPress Core SQL Injection Vulnerability