Firetruck

CVE-2026-63030

KEV
Updated Oct 7, 2026 · PUBLISHED
View KEV entry →

Description

WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
WordPressWordPress / WordPress>= 6.9.0, < 6.9.5affected
WordPressWordPress / WordPress>= 7.0.0, < 7.0.2affected