WordPress
7 vulnerabilities in WordPress products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-119977 | WordPress | WordPress Core | WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability | 3 Nov 2026 | 6 Nov 2026 | Unknown |
| CVE-2026-87902 | WordPress | Core | WordPress Core Remote File Inclusion Vulnerability | 25 Sep 2026 | 28 Sep 2026 | Unknown |
| CVE-2026-60137 | WordPress | Core | WordPress Core SQL Injection Vulnerability | 21 Jul 2026 | 4 Aug 2026 | Unknown |
| CVE-2026-63030 | WordPress | Core | WordPress Core Interpretation Conflict Vulnerability | 21 Jul 2026 | 24 Jul 2026 | Unknown |
| CVE-2019-9978 | WordPress | Social Warfare Plugin | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-11738 | WordPress | Snap Creek Duplicator Plugin | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-25213 | WordPress | File Manager Plugin | WordPress File Manager Plugin Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |