WordPress.com vulnerabilities
3 published CVEs name WordPress.com among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-74013
WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability
WordPress.com · eShipper Commerce
High8.5 - CVE-2026-56040
WordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability
WordPress.com · Gutenverse Form
High7.1 - CVE-2026-56039
WordPress Quick Interest Slider plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability
WordPress.com · Quick Interest Slider
High7.1