WO
Product
WordPress
4
CVEs
0
On KEV
7.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add WordPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93485 | 7.1 | Sep 18 | WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability Affected: 7.1; 7.0 through 7.0.4; 6.9 through 6.9.7; 6.8 through 6.8.8; 6.7 through 6.7.7; 6.6 through 6.6.7; +19 more |
| CVE-2026-66666 | 6.9 | Oct 6 | WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability Affected: 7.1 through 7.1.2; 7.0 through 7.0.6; 6.9 through 6.9.9; 6.8 through 6.8.10; 6.7 through 6.7.9; 6.6 through 6.6.9 |
| CVE-2024-31111 | 6.5 | Jun 25 | WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability Affected: 6.5 through 6.5.4; 6.4 through 6.4.4; 6.3 through 6.3.4; 6.2 through 6.2.5; 6.1 through 6.1.6; 6.0 through 6.0.8; +1 more |
| CVE-2024-32111 | 5.0 | Jun 25 | WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability Affected: 6.5 through 6.5.4; 6.4 through 6.4.4; 6.3 through 6.3.4; 6.2 through 6.2.5; 6.1 through 6.1.6; 6.0 through 6.0.8; +19 more |
Showing 4