WordPress.com
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| eShipper Commerce | 1 | – | Aug 20, 2026 |
| Gutenverse Form | 1 | – | Jun 26, 2026 |
| Quick Interest Slider | 1 | – | Jun 26, 2026 |
Exploited and recent CVEs
- CVE-2026-74013 WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability 0.4%
- CVE-2026-56040 WordPress Gutenverse Form plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-56039 WordPress Quick Interest Slider plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%