WordPress Foundation vulnerabilities
8 published CVEs name WordPress Foundation among the affected products; CISA lists 1 of them as exploited in the wild.
- 8Published CVEs8 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-119977
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
WordPress Foundation · WordPress
ExploitedHigh8.1