Vulnerabilities of WordPress Foundation WordPress
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-119977 | Exploited WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution | 8.1 High | Oct 31, 2026 |