Automattic WordPress

• CVE-2026-66666 Medium 6.9 WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability 0.4%
• CVE-2026-93485 High 7.1 WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability 0.7%
• CVE-2024-32111 Medium 5.0 WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability 0.5%
• CVE-2024-31111 Medium 6.5 WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability 0.3%