WordPress.com

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

WordPress.com records in CISA KEV

No WordPress.com vulnerabilities are listed in CISA KEV.

3 records

TI-2026-52003 CVE-2026-74013 · GHSA-h622-xrc2-7vh7

LOW 37

Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-08-20 No fix listed CWE-89

TI-2026-40434 CVE-2026-56040 · GHSA-4vr7-2w2q-jv5q

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-06-26 No fix listed CWE-79

TI-2026-40433 CVE-2026-56039 · GHSA-cx36-2wx4-c9rp

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-06-26 No fix listed CWE-79