Security Digest
WordPress: known exploited vulnerabilities
3 WordPress CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-25 | CVE-2026-87902 | WordPress Core WordPress Core Remote File Inclusion Vulnerability | 2026-09-28 |
| 2026-07-21 | CVE-2026-63030 | WordPress Core WordPress Core Interpretation Conflict Vulnerability | 2026-07-24 |
| 2026-07-21 | CVE-2026-60137 | WordPress Core WordPress Core SQL Injection Vulnerability | 2026-08-04 |