wordpress
Safeguard articles tagged "wordpress" — guides, analysis, and best practices for software supply chain and application security.
6 articles
CVE-2019-9978: WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
CVE-2019-9978 affects WordPress Social Warfare Plugin and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-11738: WordPress Snap Creek Duplicator Plugin File Download Vulnerability
CVE-2020-11738 affects WordPress Snap Creek Duplicator Plugin and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-25213: WordPress File Manager Plugin Remote Code Execution Vulnerability
CVE-2020-25213 affects WordPress File Manager Plugin and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2026-63030: WordPress Core Interpretation Conflict Vulnerability
CVE-2026-63030 affects WordPress Core and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-21.
CVE-2026-60137: WordPress Core SQL Injection Vulnerability
CVE-2026-60137 affects WordPress Core and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-07-21.
Two WordPress CVEs, and NVD Says They're the Same Attack Chain
WordPress core's CVE-2026-63030 explicitly references CVE-2026-60137 in its own NVD description — a documented exploitation chain, not two coincidentally similar bugs.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.