What is the official website of WordPress ?

The official website of WordPress is http://wordpress.org/.

What is WordPress's cybersecurity risk score?

WordPress has an AI-generated cybersecurity risk score of 700 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has WordPress experienced?

According to Rankiteo, WordPress currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has WordPress been affected by any supply chain cyber incidents ?

According to Rankiteo, WordPress has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Zyxel Networks (Incident ID: WOR1790152041) WordPress (Incident ID: AWSWOR1790952139) WordPress (Incident ID: NUCPALZYXWESSEC1790066961) WordPress (Incident ID: WOR1784348620) Adobe Commerce (Incident ID: ADOWOR1791471379) WordPress (Incident ID: THE1780575910) Elementor (Incident ID: ELEWOR1773333877) FORTBRIDGE (Incident ID: FORWOR1791210523) Google (Incident ID: GOOWOR1779762335)

Does WordPress have SOC 2 Type 1 certification ?

According to Rankiteo, WordPress is not certified under SOC 2 Type 1.

Does WordPress have SOC 2 Type 2 certification ?

According to Rankiteo, WordPress does not hold a SOC 2 Type 2 certification.

Does WordPress comply with GDPR ?

According to Rankiteo, WordPress is not listed as GDPR compliant.

Does WordPress have PCI DSS certification ?

According to Rankiteo, WordPress does not currently maintain PCI DSS compliance.

Does WordPress comply with HIPAA ?

According to Rankiteo, WordPress is not compliant with HIPAA regulations.

Does WordPress have ISO 27001 certification ?

According to Rankiteo,WordPress is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does WordPress operate in ?

WordPress operates primarily in the Technology, Information and Internet industry.

How many employees does WordPress have ?

WordPress employs approximately 11,247 people worldwide.

Does WordPress own any subsidiaries ?

WordPress presently has no subsidiaries across any sectors.

How many LinkedIn followers does WordPress have ?

WordPress's official LinkedIn profile has approximately 219,391 followers.

What is the NAICS classification code for WordPress ?

WordPress is classified under the NAICS code 513, which corresponds to Others.

Does WordPress have a Crunchbase profile ?

No, WordPress does not have a profile on Crunchbase.

Does WordPress have a LinkedIn profile ?

Yes, WordPress maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/wordpress.

How many cybersecurity incidents has WordPress experienced ?

As of October 10, 2026, Rankiteo reports that WordPress has experienced 14 cybersecurity incidents.

How many peer or competitor companies does WordPress have ?

WordPress has an estimated 15,551 peer or competitor companies worldwide.

What types of cybersecurity incidents has WordPress faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack and Vulnerability.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

WordPress

Boost Score +25 with badge (5 left)

700

/1000

Moderate

725

/1000

Moderate

WordPress Vendor Cyber Rating & Cyber Score

wordpress.org

Add Your Compliance Badge

WordPress is web publishing software you can use to create a beautiful website or blog. We like to say that WordPress is both free and priceless at the same time.

WordPress

WordPress CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

WordPress

Vulnerability

100

9/2026

Zyxel Networks

WOR1790152041

WordPress

Vulnerability

9/2026

WOR1790079856

WordPress

Cyber Attack

8/2026

WordPress

AWSWOR179095213...

WordPress

Vulnerability

8/2026

WOR1786595022

WordPress

Cyber Attack

7/2026

WordPress

NUCPALZYXWESSEC...

WordPress

Vulnerability

100

7/2026

WOR1784723234

WordPress

Vulnerability

100

7/2026

WordPress

WOR1784348620

WordPress

Vulnerability

7/2026

Adobe Commerce

ADOWOR179147137...

WordPress

Vulnerability

6/2026

WOR1783499208

WordPress

Vulnerability

100

4/2026

WordPress

THE1780575910

WordPress

Vulnerability

2/2026

Elementor

ELEWOR177333387...

WordPress

Vulnerability

1/2026

WOR1790346574

WordPress

Vulnerability

100

5/2025

FORTBRIDGE

FORWOR179121052...

WordPress

Cyber Attack

100

1/2021

Google

GOOWOR177976233...

Loading…

A.I.

WordPress Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for WordPress

Incidents vs Technology, Information and Internet Industry Avg (This Year)

WordPress has 640.74% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

WordPress has 1088.12% more incidents than the average of all companies with at least one recorded incident.

Incident Types WordPress vs Technology, Information and Internet Industry Avg (This Year)

WordPress reported 12 incidents this year: 2 cyber attacks, 0 ransomware, 10 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - WordPress (X = Date, Y = Severity)

Loading…

SUBSIDIARY

WordPress Subsidiaries

Parent Company

WordPress

Technology, Information and Internet

Website: http://wordpress.org/

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

WordPress Similar Companies

e&

eand.com

We're a global technology group focused on innovation and collaboration to create a better future for all. Since 1976, we've been pioneering new technologies and expanding our reach to more people and places. Today, we provide services to over 163 million customers across 16 countries in the Middle East, Asia, and Africa through our telecom brands under e& international and e& UAE. We're committed to driving the digital future to empower societies and help businesses and governments create a smarter, safer, and more sustainable world through all our business verticals including e& enterprise, e& life, and e& capital. Our goal is to empower people, communities, and societies worldwide to achieve more.

Delivery Hero

deliveryhero.com

As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly, and stay human along the way. It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative, and ready to dive deep into meaningful work, you’ll fit right in.

foodpanda

foodpanda.com

At foodpanda, we're on a mission to redefine how food, people, culture and tech are connected. Our panda family consists of problem solvers, designers and thinkers, working around the clock to make foodpanda the most powerful online tool for food convenience in the universe- and we’re just getting started! foodpanda operates in 11 locations worldwide. Through the energy of our teams in all of our offices, we connect lovers of food to our brilliant partners through our amazing riders. We're changing the way food convenience is viewed and experienced worldwide. If you're passionate about good food and great work, you're in the right place.

Tieto

tieto.com

Tieto provides customers across different industries with mission-critical solutions through its specialized software businesses Tieto Caretech, Tieto Banktech and Tieto Indtech as well as Tieto Tech Consulting business. The company's around 13 000 talented vertical software, design, cloud and AI experts are dedicated to empowering our customers to succeed and innovate with latest technology. Tieto’s annual revenue is approximately EUR 2 billion. The company’s shares are traded on the NASDAQ exchange in Helsinki and Stockholm.

Primary School

primaryschool.com.au

www.primaryschool.com.au is a directory of sites for students and lesson plans and reference material for teachers and parents. It is currently averaging up to 350,000 unique visitors a month and has over 44,000 subscribers to its free weekly newsletter which showcases the latest internet based resources. The site ranks first in results for primary school related searches in Google. It is popular because it is simple, safe and relevant.

Freelancer.com

freelancer.com

Thirteen-time Webby award-winning Freelancer is the world’s largest freelancing and crowdsourcing marketplace by total number of users and projects posted. More than 85 million registered users have posted over 25 million projects and contests to date in over 4,000 areas as diverse as website development, logo design, marketing, copywriting, astrophysics, aerospace engineering and manufacturing. Freelancer owns Escrow.com, the world's largest online escrow company. Freelancer also owns Loadshift, Australia's largest heavy haulage freight marketplace, with over 800 million kilometers of freight posted since inception. Freelancer Limited is listed on the Australian Securities Exchange under the ticker ASX:FLN and is quoted in the US as FRLCY.

IndiaMART InterMESH Limited

cb indiamart.com

IndiaMART is India's largest online B2B marketplace, connecting buyers with suppliers across a wide array of industries. IndiaMART provides a platform for Small & Medium Enterprises (SMEs), large enterprises, and individual buyers, helping them access diverse portfolios of quality products. Since 1999, IndiaMART’s mission has been to make doing business easy. Today, over 21.9 Crore buyers can explore and choose from 12.4 Crore products, sourced from 86 Lakh suppliers, creating a one-stop platform for all business needs. IndiaMART offers enhanced business visibility and credibility for suppliers, with tools designed to support business growth and operational efficiency. With a dedicated workforce of over 5000 employees across India, IndiaMART continues to facilitate seamless connections and provide a trusted marketplace for businesses to thrive.

Fanatics

fanaticsinc.com

Fanatics is committed to relentlessly enhancing the fan experience. As a leading global sports platform, Fanatics allows fans to buy, bet, and collect while engaging with sports in deeper, more immersive ways. Fanatics is redefining how fans connect with their favorite teams and players. Through its businesses—Fanatics Commerce, Fanatics Collectibles, Fanatics Betting & Gaming, Fanatics Events, Fanatics Markets, and Fanatics Studios—the company has built a powerful, integrated ecosystem. By bringing together licensed fan gear, physical and digital trading cards, live events, and more, Fanatics delivers personalized experiences to over 100 million fans worldwide. Fanatics currently holds partnerships with over 900 sports properties, including professional and college teams, leagues, players’ associations, and retail partners. Fanatics also partners with over 5,000 athletes and celebrities, including 250 exclusive partnerships, and has over 2,000 retail locations. Beyond these partnerships, Fanatics has its own powerhouse team of more than 22,000 global employees.

Jumia Group

cb jumia.com

Jumia (NYSE :JMIA) is a leading e-commerce platform in Africa. It is built around a marketplace, Jumia Logistics, and JumiaPay. The marketplace helps millions of consumers and sellers to connect and transact. Jumia Logistics enables the delivery of millions of packages through our network of local partners. JumiaPay facilitates the payments of online transactions for Jumia's ecosystem. With over 1 billion people and 500 million internet users in Africa, Jumia believes that e-commerce is making people's lives easier by helping them shop and pay for millions of products at the best prices wherever they live. E-commerce is also creating new opportunities for SMEs to grow, and job opportunities for a new generation to thrive. With over 3,000 employees in more than 9 countries in Africa, Jumia is led by top talented leaders offering a great mix of local and international talents and is backed by very high-profile shareholders. Jumia is committed to creating sustainable impact in Africa. Jumia offers unique opportunities in a vibrant and booming environment, creating new jobs, new skills, and empowering a new generation.

Loading…

NEWS

WordPress CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 06, 2026 05:10 PM

Hackers exploiting WordPress membership plugin bug to create admin accounts

A popular WP plugin can be abused to take over websites and thousands of sites are vulnerable.

Read Article

March 06, 2026 12:05 PM

WordPress Membership Plugin Vulnerability Let Attackers Create Admin Accounts

Critical flaw in a WordPress User Registration plugin allows unauthenticated attackers to create admin accounts and take over sites.

Read Article

March 05, 2026 08:00 AM

Cybersecurity Blog | Threat Intelligence, AI Security & Cyber Research

Cyble's cybersecurity blog covers AI-native threat intelligence, dark web research, agentic AI, and emerging cyber threats.

Read Article

February 23, 2026 08:00 AM

GrayCharlie Injects Malicious JavaScript into WordPress Sites to Deliver NetSupport RAT and Stealc

A threat actor known as GrayCharlie has been compromising WordPress websites since mid-2023, silently embedding malicious JavaScript to push...

Read Article

February 13, 2026 08:00 AM

Critical WordPress Backup Plugin Flaw Leaves 800,000 Sites Exposed to Remote Code Execution

A critical vulnerability in the WPvivid Backup plugin exposes over 800000 WordPress sites to unauthenticated remote code execution.

Read Article

February 12, 2026 08:00 AM

Wordpress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks

Critical WPvivid flaw (CVE-2026-1357) lets attackers upload files and seize WordPress sites; patch in v0.9.124.

Read Article

January 23, 2026 08:00 AM

20,000 WordPress Sites Affected by Backdoor Vulnerability Allowing Malicious Admin User Creation

Critical backdoor in LA-Studio Element Kit for Elementor lets attackers create admin accounts, risking takeover of 20000+ sites.

Read Article

January 20, 2026 08:00 AM

WordPress Plugin Vulnerability Exposes Over 100,000 Sites to Privilege Escalation Attacks

A critical privilege escalation vulnerability in Advanced Custom Fields: Extended, a WordPress plugin with over 100,000 active installations...

Read Article

January 20, 2026 08:00 AM

WordPress Plugin Vulnerability Exposes 100,000+ Sites to Privilege Escalation Attacks

A critical flaw in the ACF Extended WordPress plugin lets unauthenticated attackers gain admin access on 100000+ sites.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-22061

SUMMARY

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://security.netapp.com/advisory/NTAP-20261009-0026

CVE-2026-108269

SUMMARY

Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before permitting application traffic. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing the clients to accept an attacker-terminated connection as the attested enclave. This issue is fixed in 0.5.0.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-108268

SUMMARY

Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept an attacker-terminated connection as the attested enclave. This issue is fixed in tdx-v0.2.43 and tdx-gpu-v0.6.27.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-108267

SUMMARY

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who obtained an enclave TLS private key could relay a genuine quote onto another connection, causing a relying party to accept a handshake terminated by the attacker as an attested enclave connection. This issue is fixed in privasys-v0.5.1-go1.26.5.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: )

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-92705

SUMMARY

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted `ASS` file together with a referenced malicious Automation script, and opening the `AS` file executes arbitrary code with the privileges of the Aegisub process. From 3.4.0 to 3.4.2, inconsistent handling of embedded `NUL` characters between extension validation and filesystem operations additionally allows a crafted `ASS/Lua` polyglot to reference and execute itself as a single-file variant. The vulnerability is fixed in Aegisub 3.5.0.

Published

Date2026-10-09

Updated

Date2026-10-09

RISK INFORMATION (Score: 7.8)

cvss3

Base Score: 7.8

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

WordPress Vendor Cyber Rating & Cyber Score

WordPress A.I CyberSecurity Scoring

WordPress CyberSecurity News & History

WordPress Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for WordPress

Incidents vs Technology, Information and Internet Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types WordPress vs Technology, Information and Internet Industry Avg (This Year)

Incident History - WordPress (X = Date, Y = Severity)

WordPress Subsidiaries

Parent Company

WordPress

WordPress Similar Companies

e&

Delivery Hero

foodpanda

Tieto

Primary School

Freelancer.com

IndiaMART InterMESH Limited

Fanatics

Jumia Group

WordPress CyberSecurity News

Hackers exploiting WordPress membership plugin bug to create admin accounts

WordPress Membership Plugin Vulnerability Let Attackers Create Admin Accounts

Cybersecurity Blog | Threat Intelligence, AI Security & Cyber Research

GrayCharlie Injects Malicious JavaScript into WordPress Sites to Deliver NetSupport RAT and Stealc

Critical WordPress Backup Plugin Flaw Leaves 800,000 Sites Exposed to Remote Code Execution

Wordpress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks

20,000 WordPress Sites Affected by Backdoor Vulnerability Allowing Malicious Admin User Creation

WordPress Plugin Vulnerability Exposes Over 100,000 Sites to Privilege Escalation Attacks

WordPress Plugin Vulnerability Exposes 100,000+ Sites to Privilege Escalation Attacks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

WordPress CyberSecurity News & History

WordPress Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for WordPress

Incidents vs Technology, Information and Internet Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types WordPress vs Technology, Information and Internet Industry Avg (This Year)

Incident History - WordPress (X = Date, Y = Severity)

WordPress Subsidiaries

Parent Company

WordPress

WordPress Similar Companies

e&

Delivery Hero

foodpanda

Tieto

Primary School

Freelancer.com

IndiaMART InterMESH Limited

Fanatics

Jumia Group

WordPress CyberSecurity News

Hackers exploiting WordPress membership plugin bug to create admin accounts

WordPress Membership Plugin Vulnerability Let Attackers Create Admin Accounts

Cybersecurity Blog | Threat Intelligence, AI Security & Cyber Research

GrayCharlie Injects Malicious JavaScript into WordPress Sites to Deliver NetSupport RAT and Stealc

Critical WordPress Backup Plugin Flaw Leaves 800,000 Sites Exposed to Remote Code Execution

Wordpress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks

20,000 WordPress Sites Affected by Backdoor Vulnerability Allowing Malicious Admin User Creation

WordPress Plugin Vulnerability Exposes Over 100,000 Sites to Privilege Escalation Attacks

WordPress Plugin Vulnerability Exposes 100,000+ Sites to Privilege Escalation Attacks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?