As cited
Copy frozen at (site build).
vulnerabilities
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)
During September 7 to 13, 2026, Wordfence Intelligence recorded 260 vulnerabilities across 207 WordPress plugins, with 217 patched, 1 partially patched, and 42 remaining unpatched. The vulnerability distribution included 10 critical, 66 high, and 184 medium severity issues, with cross-site scripting and missing authorization representing the most common weakness types.
Why it matters: WordPress site administrators and security teams need to prioritize patching the 42 unpatched vulnerabilities, particularly the 10 critical-severity flaws affecting popular plugins like Advanced Customized Prompts, Frontegg SAML SSO, Teddy Bear Customize Addon, and The Events Calendar, to prevent remote code execution, arbitrary file uploads, and authentication bypass attacks.
- Source published
- First seen by Cybersecurity Tracker