WordPress Core: known exploited vulnerabilities
Entries3
Ransomware-linked0
First added2026-07-21
Latest2026-09-25
EPSS compared
39.9%
10.6%
5.3%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-87902 | WordPress Core | 2026-09-25 | 39.9% | Unknown |
| CVE-2026-63030 | WordPress Core | 2026-07-21 | 10.6% | Unknown |
| CVE-2026-60137 | WordPress Core | 2026-07-21 | 5.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.