Skip to content
OpenAdvisories

Product · Automattic

WordPress

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-93485 Public exploit

    WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through 7.1.

    Automattic WordPress wordpress wordpress Web / CMS Debian Ubuntu