WordPress: exploited vulnerabilities
- 6exploited vulnerabilities
- 0used by ransomware
- Sep 25, 2026latest one added
- Core 3
- File Manager Plugin 1
- Snap Creek Duplicator Plugin 1
- Social Warfare Plugin 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 25, 2026 | Remote File Inclusion | Core | High 8.1 | 96% |
| Jul 21, 2026 | Interpretation Conflict | Core | Critical 9.8 | 11% |
| Jul 21, 2026 | SQL Injection | Core | Medium 5.9 | 5.3% |
| Nov 3, 2021 | Remote Code Execution | File Manager Plugin | Critical 10.0 | 97% |
| Nov 3, 2021 | File Download | Snap Creek Duplicator Plugin | High 7.5 | 98% |
| Nov 3, 2021 | Cross-Site Scripting (XSS) | Social Warfare Plugin | Medium 6.1 | 73% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.