Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 21
   CVE NVD 29h ago

   WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3.

   WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated…

   CVSS 8.1 CVE-2026-119977 WordPress Foundation Web platform
2. 14
   CVE NVD 41h ago

   The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up…

   The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. This is due to the plugin not properly verifying that…

   CVSS 4.3 CVE-2026-109592 Wordpressdotorg Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=WordPress&limit=100. RSS for this section: feed.xml.