Exploited: 178
LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
VulnFeed.org
AREN

WordPress vulnerabilities and fixes

Exploited and high-severity WordPress vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.1CVE-2026-119977WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition VulnerabilityRCEExploitedVerify fixWordPress Foundation WordPress
    1 min read
  2. 8.1CVE-2026-87902WordPress Core Remote File Inclusion VulnerabilityRCEExploitedFix availableWordPress Core
    1 min read
  3. 5.9CVE-2026-60137WordPress Core SQL Injection VulnerabilityRCEExploitedFix availableWordPress Core
    1 min read
  4. 9.8CVE-2026-63030WordPress Core Interpretation Conflict VulnerabilityRCEExploitedFix availableWordPress Core
    1 min read
Esc