Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 21
   CVE NVD 30h ago

   WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3.

   WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated…

   CVSS 8.1 CVE-2026-119977 WordPress Foundation Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=WordPress+Foundation&limit=100. RSS for this section: feed.xml.