WordPress Summary

WordPress is a popular CMS platform with many extensions. For simplicity, all WordPress plugin vulnerabilities have been grouped under the vendor.

WordPress has published 6,519 vulnerabilities in 2026.

754 have exploits πŸ‘Ύ , 1 scored > 90% EPSS 🟣 and 4 have trended in the news.

Vulnerability Breakdown

CRITICAL
587
HIGH
2,386
MEDIUM
3,464
LOW
62

Plus 20 vulnerabilities yet to be given a severity rating.

Vulnerability Severity By Month 2026

Total WordPress Vulnerabilities

CRITICAL
2,480
HIGH
9,339
MEDIUM
21,097
LOW
317

Plus 1,407 vulnerabilities without a severity rating.

Vulnerability Severity By Year

Vulnerability Published Matrix for 2026

Vulnerability Published Matrix for 2025