WO
CMS
WordPress
by WordPress · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
364
CVEs
7
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 20High 47Medium 102Low 2
Watch

Add WordPress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-87902
In wildKEV
8.1
96%
Sep 22
WordPress Core Remote File Inclusion Vulnerability
Affected: before 7.1.2
CVE-2020-11738
In wildKEV
7.5
98%
Apr 13
WordPress Snap Creek Duplicator Plugin File Download Vulnerability
Affected: All versions, or not specified
Showing 2