Skip to content
THREATWIRE

CVE Tracker · Vendor

WordPress CVEs

6 CVEs in the tracker, 6 in the CISA KEV catalogue.

All vendors · RSS feed for WordPress · Tracker data last updated 18 Oct 2026.

Showing 6 of 6

  1. CVE-2026-87902CVSS 8.1 highEPSS 40.0%KEV2026-09-22

    Core. WordPress Core Remote File Inclusion Vulnerability

  2. CVE-2026-60137CVSS 5.9 mediumEPSS 5.32%KEV2026-07-17

    Core. WordPress Core SQL Injection Vulnerability

  3. CVE-2026-63030No CVSSEPSS 10.6%KEV

    Core. WordPress Core Interpretation Conflict Vulnerability

  4. CVE-2020-25213No CVSSEPSS 97.3%KEV

    File Manager Plugin. WordPress File Manager Plugin Remote Code Execution Vulnerability

  5. CVE-2020-11738No CVSSEPSS 97.8%KEV

    Snap Creek Duplicator Plugin. WordPress Snap Creek Duplicator Plugin File Download Vulnerability

  6. CVE-2019-9978No CVSSEPSS 72.9%KEV

    Social Warfare Plugin. WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability