Login Request a demo
WO
CMS
WordPress
by WordPress · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
365
CVEs
7
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities365In the news12Timeline
Severity mix
Critical 20High 47Medium 103Low 2
Severity
All severities365Critical20High47Medium103Low2
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add WordPress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-63030
In wildKEV
9.8
11%
Jul 17
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
Affected: 6.9.0 before 6.9.5; 7.0.0 before 7.0.2
CVE-2020-25213
In wildKEV
9.8
97%
Sep 9
WordPress File Manager Plugin Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2016-10033
In wildKEV
9.8
100%
Dec 30
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
Affected: through 4.7
Showing 3