Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-63030 is a vulnerability classified as Interpretation Conflict, affecting WordPress (affected versions: 6.9.0 – < 6.9.5 and 7.0.0 – < 7.0.2). This vulnerability is rated Critical, with a CVSS score of 9.8. This vulnerability has been observed being exploited in the wild.
Analyzing data...
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
en
