sign in--:--:--UTC

CVE-2026-60137

exploited in the wild☆ pin

CVSS

—

Reports

14

First seen

Jul 18, 2026

Last seen

Oct 13, 2026

Affected product

WordPress Core

Recent reports

September 2026 CVE Landscape: 94 High-Impact Vulnerabilities with Active Exploitation

Recorded Future InsiktOct 13, 2026 High

Eight Malicious npm Packages Deliver Overlord RAT and Stealer in MALFEX Campaign

The Hacker NewsOct 7, 2026 Critical

Chinese threat actor exploits multiple vulnerabilities to steal government data

Bleeping ComputerSep 22, 2026 High

WordPress Contains Two High-Risk Security Vulnerabilities (CVE-2026-60137 and CVE-2026-63030)

NICS TaiwanJul 27, 2026 High

msaRAT: Rust-based RAT deployed by Chaos ransomware group via Chrome DevTools Protocol

Cisco TalosJul 23, 2026 High

Windmill Path Traversal Vulnerability (CVE-2026-29059) Actively Exploited in the Wild

The Hacker NewsJul 22, 2026 Critical

Critical wp2shell WordPress flaws exploited to install webshells

Bleeping ComputerJul 21, 2026 High

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesJul 21, 2026 Critical

WordPress wp2shell Vulnerabilities Under Active Exploitation; Mass Scanning Campaign Underway

The Hacker NewsJul 21, 2026 High

WordPress Security Advisory – CVE-2026-60137 and CVE-2026-63030 Exploited in the Wild

Canadian Centre AlertsJul 20, 2026 Critical

Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day

The Hacker NewsJul 20, 2026 High

Check Point Threat Intelligence Report – 20 July 2026

Check Point ResearchJul 20, 2026 High

WordPress Multiple Vulnerabilities Allow Remote Code Execution

HKCERTJul 20, 2026 Critical

WordPress Core "wp2shell" RCE vulnerabilities receive public exploits; immediate patching urged

Bleeping ComputerJul 18, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans