WordPress
6 CVEs in CISA KEV
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2026-87902 |
Core | — | 0.9577 | 2026-09-25 | 2026-09-28 | WordPress Core contains a remote file inclusion vulnerability which could allow | |
CVE-2026-63030 |
Core | — | 0.1065 | 2026-07-21 | 2026-07-24 | WordPress Core contains an interpretation conflict vulnerability that could allo | |
CVE-2026-60137 |
Core | — | 0.0532 | 2026-07-21 | 2026-08-04 | WordPress Core contains a SQL injection vulnerability when a plugin or theme pas | |
CVE-2020-25213 |
File Manager Plugin | — | — | 2021-11-03 | 2022-05-03 | WordPress File Manager plugin contains a remote code execution vulnerability tha | |
CVE-2020-11738 |
Snap Creek Duplicator Plugin | — | — | 2021-11-03 | 2022-05-03 | WordPress Snap Creek Duplicator plugin contains a file download vulnerability wh | |
CVE-2019-9978 |
Social Warfare Plugin | — | — | 2021-11-03 | 2022-05-03 | WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerabil |