As cited
Copy frozen at (site build).
vulnerabilities
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 5, 2026 to October 11, 2026)
Wordfence added 655 vulnerabilities across 406 WordPress plugins and 100 themes to its vulnerability database in the week ending October 11, 2026, with 236 researchers contributing to disclosures. The vulnerabilities ranged in severity from critical remote code execution flaws to low-impact issues, with 366 receiving patches and 289 remaining unpatched at the time of reporting.
Why it matters: WordPress site owners running affected plugins and themes need to prioritize patching critical vulnerabilities (21 identified) and high-severity issues (249 identified), particularly those enabling unauthenticated remote code execution, arbitrary file uploads, and authentication bypasses, as Wordfence Firewall Premium users received protection in real-time while free users face a 30-day delay.
- Source published
- First seen by Cybersecurity Tracker