WordPress Incidents
When the WordPress ecosystem breaks, businesses end up paying the price.
Every day a plugin breaks, an update upends functionality, and real-world impact hits businesses that rely on WordPress. Here are stories that show the cost of depending on themes, plugins, and hosting add-ons for core infrastructure.
Vulnerabilities in 2025
11,241
2026 (so far)
10,295
October (so far)
1,451
2026 vulnerabilities by software type
Plugin vulnerabilities
9,175
Theme vulnerabilities
1,084
Core vulnerabilities
36
Live Feed
Recent Critical & High Severity Vulnerabilities
WordPress vulnerabilities with CVSS 7 or higher among Patchstack's 20 newest listings.
Kirki
Rank Math SEO PRO
European VAT Compliance Assistant for WooCommerce
User Registration
WooCommerce EU VAT Assistant
LearnPress
WP Booking System
Sources:
Feed checked Oct 18, 2026, 12:01 AM UTC (just now).
Latest high-severity disclosure: Oct 17, 2026.
Disclaimer: This page aggregates third-party reporting and vulnerability feeds for informational purposes only. Data may be delayed, incomplete, or corrected over time, and we do not verify, warrant, or guarantee its accuracy, completeness, or timeliness. Links are provided as a convenience and do not imply endorsement of any publication, vendor, plugin, theme, hosting provider, or security service. We are not responsible for the content, availability, or security of external websites. Nothing on this page constitutes professional security, legal, or compliance advice. Always evaluate your own environment and consult qualified professionals before making security or platform decisions.