https://exploit-radar.com/en/flux/marques/wordpress.xml Exploit Radar: exploited WordPress vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for WordPress products. 2026-09-25T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-87902/ CVE-2026-87902 — WordPress Core 2026-09-25T00:00:00Z Apply the patches or mitigations from WordPress; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 25, 2026. https://exploit-radar.com/en/cve/CVE-2026-63030/ CVE-2026-63030 — WordPress Core 2026-07-21T00:00:00Z Apply the patches or mitigations from WordPress; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 21, 2026. https://exploit-radar.com/en/cve/CVE-2026-60137/ CVE-2026-60137 — WordPress Core 2026-07-21T00:00:00Z Apply the patches or mitigations from WordPress; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on July 21, 2026. https://exploit-radar.com/en/cve/CVE-2020-25213/ CVE-2020-25213 — WordPress Plugins 2021-11-03T00:00:00Z Apply the security update from WordPress. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-11738/ CVE-2020-11738 — WordPress Plugins 2021-11-03T00:00:00Z Apply the security update from WordPress. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-9978/ CVE-2019-9978 — WordPress Plugins 2021-11-03T00:00:00Z Apply the security update from WordPress. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.