Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
7 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Nov 3, 2026 | CVE-2026-119977 | WordPress · WordPress Core | WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability | High 8.1 | 1.2% | Nov 6, 2026 |
| Sep 25, 2026 | CVE-2026-87902 | WordPress · Core | WordPress Core Remote File Inclusion Vulnerability | High 8.1 | 95.8% | Sep 28, 2026 |
| Jul 21, 2026 | CVE-2026-63030 | WordPress · Core | WordPress Core Interpretation Conflict Vulnerability | Critical 9.8 | 10.6% | Jul 24, 2026 |
| Jul 21, 2026 | CVE-2026-60137 | WordPress · Core | WordPress Core SQL Injection Vulnerability | Medium 5.9 | 5.3% | Aug 4, 2026 |
| Nov 3, 2021 | CVE-2020-25213 | WordPress · File Manager Plugin | WordPress File Manager Plugin Remote Code Execution Vulnerability | Critical 10.0 | 97.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-11738 | WordPress · Snap Creek Duplicator Plugin | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | High 7.5 | 97.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-9978 | WordPress · Social Warfare Plugin | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 72.9% | May 3, 2022 |