CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

WordPress — security advisories

19 advisories10 exploitedlatest 2026-08-18⚡ RSS feed

Tracked WordPress products:

Snap Creek Duplicator File Manager Plugin Social Warfare Plugin WordPress WordPress Core

⚡ Watch WordPress

Get an email when a new WordPress advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] WordPress: Vulnerability enables code execution

highCVE-2026-65640cert-bund2026-08-18

[NEW] [high] WordPress: Multiple vulnerabilities

highCVE-2026-64638cert-bund2026-08-13

Vulnerability in WordPress (August 13, 2026)

unknownCVE-2026-65640cert-fr-avis2026-08-13

WordPress security advisory (AV26-792)

unknownCVE-2026-64638cccs2026-08-10

DSA-6427-1 wordpress - security update

unknownCVE-2026-64638debian2026-08-10

Multiple vulnerabilities in WordPress (August 07, 2026)

unknownCVE-2026-64638cert-fr-avis2026-08-07

[NEW] [critical] WordPress: Multiple vulnerabilities allow code execution

criticalCVE-2026-60137 CVE-2026-63030cert-bund2026-07-24

DSA-6399-1 wordpress - security update

unknownexploitedCVE-2026-60137debian2026-07-23

WordPress security advisory (AV26-723) - Update 1

unknownexploitedCVE-2026-60137 CVE-2026-63030cccs2026-07-21

CVE-2026-63030: WordPress Core Interpretation Conflict Vulnerability

criticalexploitedCVE-2026-63030cisa-kev2026-07-21

CVE-2026-60137: WordPress Core SQL Injection Vulnerability

criticalexploitedCVE-2026-60137cisa-kev2026-07-21

WordPress Multiple Vulnerabilities

unknownCVE-2026-63030 CVE-2026-60137hkcert2026-07-20

Multiple vulnerabilities in WordPress (July 20, 2026)

unknownCVE-2026-60137 CVE-2026-63030cert-fr-avis2026-07-20

Multiple vulnerabilities in WordPress (July 20, 2026)

unknownexploitedCVE-2026-60137 CVE-2026-63030cert-fr-alerte2026-07-20

CVE-2026-63030: WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (C

criticalexploitedCVSS 9.8CVE-2026-63030nvd2026-07-17

CVE-2026-60137: WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a

mediumexploitedCVSS 5.9CVE-2026-60137nvd2026-07-17

CVE-2020-11738: WordPress Snap Creek Duplicator Plugin File Download Vulnerability

criticalexploitedCVE-2020-11738cisa-kev2021-11-03

CVE-2019-9978: WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

criticalexploitedCVE-2019-9978cisa-kev2021-11-03

CVE-2020-25213: WordPress File Manager Plugin Remote Code Execution Vulnerability

criticalexploitedCVE-2020-25213cisa-kev2021-11-03