WordPress: 6 known exploited vulnerabilities

CVE-2026-87902 – WordPress Core (added 2026-09-25)
CVE-2026-63030 – WordPress Core (added 2026-07-21)
CVE-2026-60137 – WordPress Core (added 2026-07-21)
CVE-2020-25213 – WordPress File Manager Plugin (added 2021-11-03)
CVE-2020-11738 – WordPress Snap Creek Duplicator Plugin (added 2021-11-03)
CVE-2019-9978 – WordPress Social Warfare Plugin (added 2021-11-03)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).