Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Wordpress

2 known vulnerabilities

1
CRITICAL
1
MEDIUM

Top Products

wordpress 2
2 CVEs
9.8
CVE-2026-63030 KEV

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which

 5.9
CVE-2026-60137 KEV

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p

Frequently Asked Questions

How many CVEs affect Wordpress?

Wordpress has 2 CVE records in our database, including 1 critical and 0 high severity vulnerabilities. 2 of these are listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most severe Wordpress vulnerabilities?

Wordpress has 1 critical severity (CVSS 9.0+) and 0 high severity (CVSS 7.0-8.9) vulnerabilities. 2 vulnerabilities are confirmed as actively exploited in the wild.

How can I scan for Wordpress vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Wordpress products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Wordpress Vulnerabilities

CyberStrike scans your infrastructure for Wordpress vulnerabilities and provides real-time remediation guidance.

Get Started