What is the official website of WordPress ?

The official website of WordPress is http://wordpress.org/.

What is WordPress's cybersecurity risk score?

WordPress has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has WordPress experienced?

According to Rankiteo, WordPress currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has WordPress been affected by any supply chain cyber incidents ?

According to Rankiteo, WordPress has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: WordPress (Incident ID: WOR1784348620) WordPress (Incident ID: THE1780575910) Elementor (Incident ID: ELEWOR1773333877) Google (Incident ID: GOOWOR1779762335)

Does WordPress have SOC 2 Type 1 certification ?

According to Rankiteo, WordPress is not certified under SOC 2 Type 1.

Does WordPress have SOC 2 Type 2 certification ?

According to Rankiteo, WordPress does not hold a SOC 2 Type 2 certification.

Does WordPress comply with GDPR ?

According to Rankiteo, WordPress is not listed as GDPR compliant.

Does WordPress have PCI DSS certification ?

According to Rankiteo, WordPress does not currently maintain PCI DSS compliance.

Does WordPress comply with HIPAA ?

According to Rankiteo, WordPress is not compliant with HIPAA regulations.

Does WordPress have ISO 27001 certification ?

According to Rankiteo,WordPress is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does WordPress operate in ?

WordPress operates primarily in the Technology, Information and Internet industry.

How many employees does WordPress have ?

WordPress employs approximately 11,247 people worldwide.

Does WordPress own any subsidiaries ?

WordPress presently has no subsidiaries across any sectors.

How many LinkedIn followers does WordPress have ?

WordPress's official LinkedIn profile has approximately 219,391 followers.

What is the NAICS classification code for WordPress ?

WordPress is classified under the NAICS code 513, which corresponds to Others.

Does WordPress have a Crunchbase profile ?

No, WordPress does not have a profile on Crunchbase.

Does WordPress have a LinkedIn profile ?

Yes, WordPress maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/wordpress.

How many cybersecurity incidents has WordPress experienced ?

As of August 23, 2026, Rankiteo reports that WordPress has experienced 7 cybersecurity incidents.

How many peer or competitor companies does WordPress have ?

WordPress has an estimated 15,214 peer or competitor companies worldwide.

What types of cybersecurity incidents has WordPress faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

WordPress

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

WordPress Vendor Cyber Rating & Cyber Score

wordpress.org

Add Your Compliance Badge

WordPress is web publishing software you can use to create a beautiful website or blog. We like to say that WordPress is both free and priceless at the same time.

WordPress A.I CyberSecurity Scoring

Scoring History

WordPress

WordPress CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

WordPress

Vulnerability

8/2026

WOR1786595022

WordPress

Vulnerability

100

7/2026

WOR1784723234

WordPress

Vulnerability

100

7/2026

WordPress

WOR1784348620

WordPress

Vulnerability

6/2026

WOR1783499208

WordPress

Vulnerability

100

4/2026

WordPress

THE1780575910

WordPress

Vulnerability

2/2026

Elementor

ELEWOR177333387...

WordPress

Cyber Attack

100

1/2021

Google

GOOWOR177976233...

Loading…

A.I.

WordPress Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for WordPress

Incidents vs Technology, Information and Internet Industry Avg (This Year)

WordPress has 270.37% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

WordPress has 482.52% more incidents than the average of all companies with at least one recorded incident.

Incident Types WordPress vs Technology, Information and Internet Industry Avg (This Year)

WordPress reported 6 incidents this year: 0 cyber attacks, 0 ransomware, 6 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - WordPress (X = Date, Y = Severity)

Loading…

SUBSIDIARY

WordPress Subsidiaries

Parent Company

WordPress

Technology, Information and Internet

Website: http://wordpress.org/

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

WordPress Similar Companies

Flipkart

flipkart.com

At Flipkart, we're driven by our purpose of empowering every Indian's dream by delivering value through innovation in technology and commerce. With a customer base of over 350 million, product coverage of over 150 million across 80+ categories, a focus on generating direct and indirect employment and a commitment to empowering generations of entrepreneurs and MSMEs, all driven by a sustainable growth strategy – Flipkart is maximising for customers, stakeholders, and the planet at large! At Flipkart, our promise to every Flipster is - getting an opportunity to leave a mark and create their own legacy, the freedom to experiment, learn and grow, work with the industry’s brightest minds as part of a diverse team and we will extend our culture of care to them to ensure that they can focus on doing their best work. Driven by audacity, bias for action, customer first, integrity and inclusion – Flipsters have pioneered solutions that have transformed digital commerce in India. From the industry-first introduction of cash-on-delivery in 2010 to the launch of voice search and multiple vernacular interfaces in 2021 that have made e-commerce a very inclusive experience, Flipkart continues the exciting journey of solving for the Indian customer. We understand that your own aspirations and journeys are unique. So you choose what you want to maximise, and we provide you the platform for it - because when you maximise, we maximise. Flipkart is a part of the Walmart-owned Flipkart Group, which also includes group companies Flipkart Wholesale, Flipkart Health+, Cleartrip, and Myntra. Get in touch with our experts for support with your orders here: https://www.flipkart.com/helpcentre

Independiente / Freelance

wikipedia.org

La etimología de la palabra deriva del término medieval inglés usado para un mercenario (free-independiente o lance-lanza), es decir, un caballero que no servía a ningún señor en concreto y cuyos servicios podían ser alquilados por cualquiera. El término fue acuñado inicialmente por Sir Walter Scott (1771-1832) en su reconocido romance histórico Ivanhoe para describir a un "guerrero medieval mercenario". La frase en inglés luego hizo la transición a un sustantivo figurativo alrededor de 1860 y fue luego reconocido como un verbo oficialmente en 1903 por varias autoridades en lingüística tales como el Diccionario Oxford de Inglés. Solamente en tiempos modernos ha mutado el término de un sustantivo (un freelance o un freelancer) y un adverbio (un periodista que trabaja freelance). Esta palabra es empleada como anglicismo en castellano como dos palabras separadas "free lance" (del inglés) o autónomo pero no tiene aplicación como verbo. Fuente: Wikipedia. https://es.wikipedia.org/wiki/Freelance Acerca de Independiente / Freelance Somos una de las comunidades de habla hispana más grandes en LinkedIn para profesionales que eligen trabajar de forma independiente. Un espacio para conectar, compartir recursos y encontrar oportunidades. Publicaciones para Empresas y Reclutadores. Para publicar una búsqueda de talento, por favor envíe los detalles de la oferta a: [email protected] El proceso es simple y asincrónico.

Mercado Livre Brasil

mercadolivre.com

At Mercado Libre, we are transforming the way people buy, sell, advertise, pay, finance, and ship across Latin America. We are the leading e-commerce and fintech company in the region, with a presence in 18 countries and a team of more than 120,000 people. We are one of the best places to work in Latin America. Being part of MELI means working with intensity and excellence because we are passionate about what we do and we believe in the value of meritocracy. We overcome our own limits and learn by tackling big challenges. We have an entrepreneurial mindset, we take risks, we reinvent ourselves, and we innovate. We compete as a team to win in a flexible and fun work environment. And so, every day, we create sustainable results that transform the lives of millions of people. We look for people who are passionate about big challenges, who are willing to step out of their comfort zone, give their maximum effort, and take risks as entrepreneurs. Join the team that makes the purpose of democratizing commerce and financial services a reality, transforming the lives of millions across Latin America. Be part of the MELI experience!

Fanatics

fanaticsinc.com

Fanatics is a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

Indeed

cb Indeed.com

More people find jobs on Indeed than anywhere else. Indeed is the #1 job site in the world (Comscore, Total Visits, March 2024) and allows job seekers to search millions of jobs in more than 60 countries and 28 languages. Indeed has more than 580 million Job Seeker Profiles. Every day, job seekers use Indeed to search for jobs, post resumes, research companies and more. For more information, visit indeed.com. **Indeed data (worldwide), job seeker accounts that have a unique, verified email address.

Jumia Group

cb jumia.com

Jumia (NYSE :JMIA) is a leading e-commerce platform in Africa. It is built around a marketplace, Jumia Logistics, and JumiaPay. The marketplace helps millions of consumers and sellers to connect and transact. Jumia Logistics enables the delivery of millions of packages through our network of local partners. JumiaPay facilitates the payments of online transactions for Jumia's ecosystem. With over 1 billion people and 500 million internet users in Africa, Jumia believes that e-commerce is making people's lives easier by helping them shop and pay for millions of products at the best prices wherever they live. E-commerce is also creating new opportunities for SMEs to grow, and job opportunities for a new generation to thrive. With over 3,000 employees in more than 9 countries in Africa, Jumia is led by top talented leaders offering a great mix of local and international talents and is backed by very high-profile shareholders. Jumia is committed to creating sustainable impact in Africa. Jumia offers unique opportunities in a vibrant and booming environment, creating new jobs, new skills, and empowering a new generation.

SLB

slb.com

SLB is a global technology company that has driven energy innovation for more than a century. With a global footprint in more than 100 countries and employees representing almost twice as many nationalities, we work each day on innovating oil and gas, delivering digital at scale, decarbonizing industries, and developing and scaling new energy systems that accelerate the energy transition. Find out more at slb.com.

Arrow Electronics

arrow.com

Arrow Electronics (NYSE:ARW) guides innovation forward for thousands of leading technology manufacturers and service providers. With 2024 sales of $27.9 billion, Arrow develops technology solutions that help improve business and daily life. Our broad portfolio that spans the entire technology landscape, helps customers design, distribute and deploy forward-thinking products that make the benefits of technology accessible to as many people as possible. Learn more at arrow.com. Are you thinking Five Years Out? Join us at careers.arrow.com.

Synechron

synechron.com

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 14,000+, and has 55 offices in 20 countries within key global markets. For more information on the company, please visit our website:www.synechron.com.

Loading…

NEWS

WordPress CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 06, 2026 05:10 PM

Hackers exploiting WordPress membership plugin bug to create admin accounts

A popular WP plugin can be abused to take over websites and thousands of sites are vulnerable.

Read Article

March 06, 2026 12:05 PM

WordPress Membership Plugin Vulnerability Let Attackers Create Admin Accounts

Critical flaw in a WordPress User Registration plugin allows unauthenticated attackers to create admin accounts and take over sites.

Read Article

March 05, 2026 08:00 AM

Cybersecurity Blog | Threat Intelligence, AI Security & Cyber Research

Cyble's cybersecurity blog covers AI-native threat intelligence, dark web research, agentic AI, and emerging cyber threats.

Read Article

February 23, 2026 08:00 AM

GrayCharlie Injects Malicious JavaScript into WordPress Sites to Deliver NetSupport RAT and Stealc

A threat actor known as GrayCharlie has been compromising WordPress websites since mid-2023, silently embedding malicious JavaScript to push...

Read Article

February 13, 2026 08:00 AM

Critical WordPress Backup Plugin Flaw Leaves 800,000 Sites Exposed to Remote Code Execution

A critical vulnerability in the WPvivid Backup plugin exposes over 800000 WordPress sites to unauthenticated remote code execution.

Read Article

February 12, 2026 08:00 AM

Wordpress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks

Critical WPvivid flaw (CVE-2026-1357) lets attackers upload files and seize WordPress sites; patch in v0.9.124.

Read Article

January 23, 2026 08:00 AM

20,000 WordPress Sites Affected by Backdoor Vulnerability Allowing Malicious Admin User Creation

Critical backdoor in LA-Studio Element Kit for Elementor lets attackers create admin accounts, risking takeover of 20000+ sites.

Read Article

January 20, 2026 08:00 AM

WordPress Plugin Vulnerability Exposes Over 100,000 Sites to Privilege Escalation Attacks

A critical privilege escalation vulnerability in Advanced Custom Fields: Extended, a WordPress plugin with over 100,000 active installations...

Read Article

January 20, 2026 08:00 AM

WordPress Plugin Vulnerability Exposes 100,000+ Sites to Privilege Escalation Attacks

A critical flaw in the ACF Extended WordPress plugin lets unauthenticated attackers gain admin access on 100000+ sites.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-78122

SUMMARY

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-78049

SUMMARY

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_space/internal/sopc_node_mgt_helper_internal.c of the component AddNodes Service. The manipulation of the argument UserAccessLevel leads to out-of-bounds read. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is aafbd37d381b618312ebdf5ddf57027f62c14fdd. It is suggested to install a patch to address this issue.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:N/I:N/A:P

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-12999

SUMMARY

The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound packet. When whd_network_send_ethernet_data() returns a synchronous failure, the underlying WHD library does not take ownership of the buffer, but the pre-fix driver returned -EIO without releasing it. Each failed transmit therefore permanently leaks one buffer from the pool. airoc_pool is small and fixed (AIROC_WIFI_TX_PACKET_POOL_COUNT + AIROC_WIFI_RX_PACKET_POOL_COUNT, default 20 buffers) and is shared by WHD's whd_host_buffer_get callback for both transmit and receive. Once enough send failures have leaked the pool dry, airoc_wifi_host_buffer_get() returns WHD_BUFFER_ALLOC_FAIL for all subsequent allocations, so both transmit and the WHD-driven receive path fail and Wi-Fi connectivity is lost until the device is rebooted. The leak occurs only on the transmit error path. A Wi-Fi-adjacent attacker can influence the conditions that cause synchronous send failures (for example by deauthenticating/disassociating the station while the local stack continues to attempt transmits), and ordinary transient failures over the device's lifetime accumulate toward the same state. Reliable on-demand triggering is of high complexity and the impact is availability-only, but the resulting denial of service is permanent and non-recoverable without a reboot. The fix releases the buffer with airoc_wifi_buffer_release() on the failure branch, returning it to the pool. The commit also removes a redundant k_sem_give() in airoc_mgmt_disconnect(); because data->sema_common is a binary semaphore (limit 1) the duplicate give merely saturated at 1 and had no security impact.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

1.6

REFERENCES

CVE-2026-74733

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions (read or write) must hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do this, and it was therefore possible that multiple threads could cause an incorrect register to be read/written. A previous patch partly fixed this, but only protected the write to the interrupt mask register, and not the read from the direction register.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-74732

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110_set_avmute Some older DCE timing generators do not implement is_tg_enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference on Southern Islands dGPUs when turning the display off over HDMI. Check that tg and the required ops exist before waiting for frames. (cherry picked from commit 2686a0c0aaa07bec2e24131835cf27b5fd4935a5)

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…