CVE-2026-60137 1

Vulnerability (CVE)

CVE-2026-60137: Word Press Core SQL Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 21, 2026

WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the parameter. This vulnerability can be chained with CVE-2026-63030 to allow an unauthenticated attacker to gain remote code execution on default...

Vulnerabilities & Patching