Security vulnerabilities from WordPress

As of 10/22/2026, WordPress recorded 4 security vulnerabilities in the last 90 days across 2 products, including 4 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.

Over the last 90 days, WordPress had the most security vulnerabilities in the WordPress ecosystem, with 3 vulnerabilities—approximately 75% of the provider's total vulnerabilities during this period.