WordPress Summary

WordPress is a popular CMS platform with many extensions. For simplicity, all WordPress plugin vulnerabilities have been grouped under the vendor.

WordPress has published 6,072 vulnerabilities in 2026.

516 have exploits πŸ‘Ύ , 1 scored > 90% EPSS 🟣 and 3 have trended in the news.

Vulnerability Breakdown

CRITICAL
531
HIGH
2,238
MEDIUM
3,243
LOW
39

Plus 21 vulnerabilities yet to be given a severity rating.

Vulnerability Severity By Month 2026

Total WordPress Vulnerabilities

CRITICAL
2,424
HIGH
9,191
MEDIUM
20,876
LOW
294

Plus 1,408 vulnerabilities without a severity rating.

Vulnerability Severity By Year

Vulnerability Published Matrix for 2026

Vulnerability Published Matrix for 2025