Search all coverage

Vendor

WordPress

Core WordPress WordPress-Coding-Standards

Tracked CVEs

CVE-2026-65640 CVE-2026-64638 CVE-2026-45293 CVE-2026-63030KEV CVE-2026-60137KEV

Coverage timeline

WordPress patches CVE-2026-65640 after remote code flaw found
www.securityweek.com · Aug 13, 2026
WordPress flaw CVE-2026-65640 lets authors run code remotely
securityonline.info · Aug 13, 2026
CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution
securityonline.info · Aug 7, 2026
CVE-2026-45293 flaw in WordPressCS lets code run via PHP lint
securityonline.info · Jul 29, 2026
UK firms must patch now as CISA flags six active exploits
securityonline.info · Jul 27, 2026
CISA adds DDWRT, Langflow and WordPress bugs to KEV list
securityaffairs.com · Jul 22, 2026
CISA warns of active exploits in WordPress, Langflow, DDWRT
securityonline.info · Jul 21, 2026
CISA Warns of Critical WordPress Flaw CVE‑2026-63030 in KEV
cisa.gov · Jul 21, 2026
CISA flags critical WordPress SQLi flaw in KEV, urges patch
cisa.gov · Jul 21, 2026
Critical WordPress Bug Lets Attackers Run Code Remotely
securityonline.info · Jul 21, 2026
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
www.darkreading.com · Jul 20, 2026
WordPress core flaw CVE-2026-63030 lets attackers execute code
isc.sans.edu · Jul 20, 2026
AI crafted WordPress exploit chain triggers urgent CVE patches
www.infosecurity-magazine.com · Jul 20, 2026
WordPress flaws CVE-2026-60137 and CVE-2026-63030 allow RCE
www.securityweek.com · Jul 20, 2026
Public PoC exploits hit critical WordPress CVEs, urging patches
securityaffairs.com · Jul 19, 2026
WordPress SQLi bug allows remote code execution, update now
securityonline.info · Jul 18, 2026
WordPress REST API flaw lets attackers run code remotely
www.rapid7.com · Jul 17, 2026