WordPress Core Vulnerabilities

Flaws in WordPress core are rarer than plugin bugs, but they hit every site on the affected version at once. Here we break them down: which versions are affected, how to find yours and which release to update to. Shield detects the WordPress version in the free scan.

All 91 Articles 49 News 42 Threats 28
All notes ✅ Checked by Shield · Checked only Check your site in Shield
What the badges mean
✅ Checked by Shield Shield already looks for this in site checks: it will find it and show it in the report.
⏳ Not checked yet Not visible from outside yet, or not added to the checks: check it yourself using the note.
Check your site in Shield →
October 31, 2026 🔴 Important ✅ Checked by Shield
WordPress Core: remote code execution during core upgrades (CVE-2026-119977)
October 30, 2026 🔴 Important ✅ Checked by Shield
WordPress Core: remote code execution flaw (no CVE assigned)
October 29, 2026 🔴 Critical ✅ Checked by Shield
WordPress: unauthenticated RCE in the core update process (fixed in 7.1.4)
Free · no sign-up

How many clicks is your site missing?

The SEO Radar shows in a minute which pages sit near the top of Google and what keeps them from moving up.

An estimate from positions, not a promise
First publication freeA link on a trusted site after sign-up. Cascades from $30.Claim ShieldCheck your site for hacks and malicious code.Check Keyword StudioQueries, volumes and clusters for your article.Open AppProjects and reports in your pocket, iOS and Android.Download
SEO tools
SEO Audit Backlinks Trust Speed AI Detector Humanizer All 120+
New articles by email