Login Request a demo
WO
CMS
WordPress
by WordPress · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
364
CVEs
7
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities364In the news12Timeline
Severity mix
Critical 20High 47Medium 102Low 2
Severity
All severities364Critical20High47Medium102Low2
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add WordPress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-9978
In wildKEV
6.1
73%
Mar 24
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
Affected: All versions, or not specified
CVE-2026-60137
In wildKEV
5.9
5%
Jul 17
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
Affected: 6.8.0 before 6.8.6; 6.9.0 before 6.9.5; 7.0.0 before 7.0.2
Showing 2