WO
Product
WordPress
by Automattic · last CVE Oct 6, 2026
2
CVEs
0
On KEV
7.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add WordPress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-66666
6.9
0%
Oct 6
WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
Affected: 7.1 through 7.1.2; 7.0 through 7.0.6; 6.9 through 6.9.9; 6.8 through 6.8.10; 6.7 through 6.7.9; 6.6 through 6.6.9
Showing 1