WO
Product
WordPress
2
CVEs
0
On KEV
7.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add WordPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93485 | 7.1 | Sep 18 | WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability Affected: 7.1; 7.0 through 7.0.4; 6.9 through 6.9.7; 6.8 through 6.8.8; 6.7 through 6.7.7; 6.6 through 6.6.7; +19 more |
| CVE-2026-66666 | 6.9 | Oct 6 | WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability Affected: 7.1 through 7.1.2; 7.0 through 7.0.6; 6.9 through 6.9.9; 6.8 through 6.8.10; 6.7 through 6.7.9; 6.6 through 6.6.9 |
Showing 2