WordPress 2.5.1 Actively exploited
Attackers are using a vulnerability in this version right now. Upgrade immediately.
Upgrade to 7.1.3
The lowest fixed release that is still supported.
- Known vulnerabilities
- 5 (0 critical, 2 high)
- End of life
- Yes, since 2008-07-14
- Data as of
- 2026-10-24 16:52 UTC
Vulnerabilities
- CVE-2026-87902 high exploited fixed in 7.1.2
- CVE-2026-65640 high fixed in 7.0.4
- CVE-2023-2745 medium fixed in 4.1.38
- CVE-2023-5692 medium
- CVE-2022-4973 medium
- 4 WordPress vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.