WordPress Vulnerability Report

Vulnerable WordPress plugins, themes, and stolen session cookies are the leading causes of hacks. Stay current on vulnerabilities so you can act quickly. Sign up now.

Sign up (Vulnerability Report)

This field is for validation purposes and should be left unchanged.
Placeholder text
Placeholder text
Thanks

Oops something went wrong, please try submitting again

By submitting your email you agree to receive weekly emails from SolidWP. You can unsubscribe at any time.

WP Core Vulnerabilities Threats Blocked

WordPress Vulnerability Report

See More

WordPress Vulnerability Report — April 1, 2026

Since last week, 225 new vulnerabilities have emerged in the WordPress ecosystem, including 203 plugins and 22 themes. Of those, 91 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 25, 2026

Since last week, 331 new vulnerabilities have emerged in the WordPress ecosystem, including 275 plugins and 56 themes. Of those, 120 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 18, 2026

Since last week, 159 new vulnerabilities have emerged in the WordPress ecosystem, including 6 in Core, 130 plugins, and 23 themes. Of those, 46 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 11, 2026

Since last week, 209 new vulnerabilities have emerged in the WordPress ecosystem, including 98 plugins and 111 themes. Of those, 134 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 4, 2026

Since last week, 281 new vulnerabilities have emerged in the WordPress ecosystem, including 108 plugins and 173 themes. Of those, 225 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — February 25, 2026

Since last week, 244 new vulnerabilities have emerged in the WordPress ecosystem, including 205 plugins and 39 themes. Of those, 80 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — February 18, 2026

Since last week, 190 new vulnerabilities have emerged in the WordPress ecosystem, including 158 plugins and 32 themes. Of those, 94 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — February 11, 2026

Since last week, 467 new vulnerabilities have emerged in the WordPress ecosystem, including 448 plugins and 19 themes. Of those, 81 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

Get SolidWP tips direct in your inbox

Sign up

This field is for validation purposes and should be left unchanged.
Placeholder text
Placeholder text
Thanks

Oops something went wrong, please try submitting again

Get started with confidence — risk free, guaranteed

Solid Suite is the seriously solid foundation your WordPress site needs.

Solid Suite Dashboard

Solid Suite

Number of sites

  • 1
  • 5
  • 10
  • 25
  • 26+
1
$199 per year20 GB Included storage

WordPress Vulnerability Report

See More

WordPress Vulnerability Report — April 1, 2026

Since last week, 225 new vulnerabilities have emerged in the WordPress ecosystem, including 203 plugins and 22 themes. Of those, 91 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 25, 2026

Since last week, 331 new vulnerabilities have emerged in the WordPress ecosystem, including 275 plugins and 56 themes. Of those, 120 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 18, 2026

Since last week, 159 new vulnerabilities have emerged in the WordPress ecosystem, including 6 in Core, 130 plugins, and 23 themes. Of those, 46 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 11, 2026

Since last week, 209 new vulnerabilities have emerged in the WordPress ecosystem, including 98 plugins and 111 themes. Of those, 134 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — March 4, 2026

Since last week, 281 new vulnerabilities have emerged in the WordPress ecosystem, including 108 plugins and 173 themes. Of those, 225 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — February 25, 2026

Since last week, 244 new vulnerabilities have emerged in the WordPress ecosystem, including 205 plugins and 39 themes. Of those, 80 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — February 18, 2026

Since last week, 190 new vulnerabilities have emerged in the WordPress ecosystem, including 158 plugins and 32 themes. Of those, 94 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

WordPress Vulnerability Report — February 11, 2026

Since last week, 467 new vulnerabilities have emerged in the WordPress ecosystem, including 448 plugins and 19 themes. Of those, 81 remain unpatched, but Solid Security Pro users are protected by virtual patching from Patchstack.

Get SolidWP tips direct in your inbox

Sign up

This field is for validation purposes and should be left unchanged.
Placeholder text
Placeholder text
Thanks

Oops something went wrong, please try submitting again

Get started with confidence — risk free, guaranteed

Solid Suite is the seriously solid foundation your WordPress site needs.

Solid Suite Dashboard

Solid Suite

Number of sites

  • 1
  • 5
  • 10
  • 25
  • 26+
1
$199 per year20 GB Included storage