netVigilance Vulnerability intelligence since 2004

WordPress

5 WordPress vulnerabilities with confirmed exploitation in the wild, as published by CISA; 5 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for WordPress
Vulnerability Status
overdue 48d2026-07-24 CVE-2026-63030 WordPress / Core WordPress Core Interpretation Conflict Vulnerability 2026-07-21 9.8 past due
overdue 37d2026-08-04 CVE-2026-60137 WordPress / Core WordPress Core SQL Injection Vulnerability 2026-07-21 5.9 past due
overdue 1591d2022-05-03 CVE-2020-25213 WordPress / File Manager Plugin WordPress File Manager Plugin Remote Code Execution Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2020-11738 WordPress / Snap Creek Duplicator Plugin WordPress Snap Creek Duplicator Plugin File Download Vulnerability 2021-11-03 7.5 past due
overdue 1591d2022-05-03 CVE-2019-9978 WordPress / Social Warfare Plugin WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability 2021-11-03 6.1 past due