WordPress Summary

WordPress is a popular CMS platform with many extensions. For simplicity, all WordPress plugin vulnerabilities have been grouped under the vendor.

WordPress has published 7,063 vulnerabilities in 2026.

956 have exploits πŸ‘Ύ , 1 scored > 90% EPSS 🟣 and 6 have trended in the news.

Vulnerability Breakdown

CRITICAL
674
HIGH
2,604
MEDIUM
3,692
LOW
73

Plus 20 vulnerabilities yet to be given a severity rating.

Vulnerability Severity By Month 2026

Total WordPress Vulnerabilities

CRITICAL
2,567
HIGH
9,557
MEDIUM
21,325
LOW
328

Plus 1,407 vulnerabilities without a severity rating.

Vulnerability Severity By Year

Vulnerability Published Matrix for 2026

Vulnerability Published Matrix for 2025