Log in Start free

whyun

Products

ProductCVEsExploitedLatest
WPCOM Member6–Oct 10, 2026

Exploited and recent CVEs

  • CVE-2026-104803 Critical 9.8 WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback 0.4%
  • CVE-2025-14002 High 8.1 WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP 0.5%
  • CVE-2025-11920 High 8.8 WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.6%
  • CVE-2025-2221 High 7.5 WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection 1.7%
  • CVE-2025-1475 Critical 9.8 WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone' 0.6%
  • CVE-2024-7493 Critical 9.8 WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta 0.6%