WordPress Incidents
When the WordPress ecosystem breaks, businesses end up paying the price.
Every day a plugin breaks, an update upends functionality, and real-world impact hits businesses that rely on WordPress. Here are stories that show the cost of depending on themes, plugins, and hosting add-ons for core infrastructure.
Vulnerabilities in 2025
11,241
2026 (so far)
10,532
October (so far)
1,688
2026 vulnerabilities by software type
Plugin vulnerabilities
9,397
Theme vulnerabilities
1,099
Core vulnerabilities
36
Live Feed
Recent Critical & High Severity Vulnerabilities
WordPress vulnerabilities with CVSS 7 or higher among Patchstack's 20 newest listings.
Depicter Slider
Otter - Gutenberg Block
Spam protection, AntiSpam, FireWall by CleanTalk
Advanced Custom Fields: Extended PRO
ACF Extended
Advanced Custom Fields: Extended PRO
Advanced Custom Fields: Extended PRO
ACF Extended
PixelYourSite – Your smart PIXEL (TAG) Manager
Infility Global
Sources:
Feed checked Oct 23, 2026, 9:55 AM UTC (just now).
Latest high-severity disclosure: Oct 23, 2026.
Disclaimer: This page aggregates third-party reporting and vulnerability feeds for informational purposes only. Data may be delayed, incomplete, or corrected over time, and we do not verify, warrant, or guarantee its accuracy, completeness, or timeliness. Links are provided as a convenience and do not imply endorsement of any publication, vendor, plugin, theme, hosting provider, or security service. We are not responsible for the content, availability, or security of external websites. Nothing on this page constitutes professional security, legal, or compliance advice. Always evaluate your own environment and consult qualified professionals before making security or platform decisions.