WordPress: known exploited vulnerabilities
Generated from CISA's catalogue of known exploited vulnerabilities as of 3 November 2026.
From CISA's catalogue, 6 entries in WordPress that Vardion has a check for. The newest first.
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2026-87902 | WordPress Core | ||
| CVE-2026-63030 | WordPress Core | ||
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) | Ransomware | |
| CVE-2020-25213 | WordPress File Manager Plugin | ||
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | ||
| CVE-2019-9978 | WordPress Social Warfare Plugin |
Know before an attacker does
Vardion scans the servers and websites you approve on the schedule you set. A known exploited vulnerability it finds goes to the top of the fix list.