As cited
Copy frozen at (site build).
vulnerabilities
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Between August 24 and August 30, 2026, Wordfence documented 246 vulnerabilities across 174 WordPress plugins and 5 themes, with 234 patches released and 12 remaining unpatched. Critical severity issues dominated the week, including 18 critical flaws and 73 high-severity vulnerabilities, with cross-site scripting and missing authorization representing the most common vulnerability types.
Why it matters: WordPress site operators must immediately patch critical remote code execution vulnerabilities in Avada, Kirki, ManageWP Worker, and other widely used plugins to prevent site compromise; the 30-day delay for free Wordfence users to receive firewall protection creates a window of exposure for unpatched sites.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Between August 24 and August 30, 2026, Wordfence documented 246 vulnerabilities across 174 WordPress plugins and 5 themes, with 234 patches released and 12 remaining unpatched. Critical severity issues dominated the week, including 18 critical flaws and 73 high-severity vulnerabilities, with cross-site scripting and missing authorization representing the most common vulnerability types.
Why it matters: WordPress site operators must immediately patch critical remote code execution vulnerabilities in Avada, Kirki, ManageWP Worker, and other widely used plugins to prevent site compromise; the 30-day delay for free Wordfence users to receive firewall protection creates a window of exposure for unpatched sites.
- Source published
- First seen by Cybersecurity Tracker