{"product":"wordpress","productName":"WordPress","version":"2.6.5","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2008-12-10","cycle":"2.6"},"counts":{"critical":0,"high":2,"medium":3,"low":0,"unknown":0},"vulnerabilities":[{"id":"CVE-2026-87902","severity":"high","score":8.1,"kev":true,"fixedIn":"7.1.2","advisoryUrl":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp"},{"id":"CVE-2026-65640","severity":"high","score":8.8,"kev":false,"fixedIn":"7.0.4","advisoryUrl":"https://wordpress.org/news/2026/08/wordpress-7-0-4-release/"},{"id":"CVE-2023-2745","severity":"medium","score":5.4,"kev":false,"fixedIn":"4.1.38","advisoryUrl":"https://www.wordfence.com/threat-intel/vulnerabilities/id/edcf46b6-368e-49c0-b2c3-99bf6e2d358f?source=cve"},{"id":"CVE-2023-5692","severity":"medium","score":5.3,"kev":false,"advisoryUrl":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e6f993b-ce09-4050-84a1-cbe9953f36b1?source=cve"},{"id":"CVE-2022-4973","severity":"medium","score":4.9,"kev":false,"advisoryUrl":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b5582e89-83e6-4898-b9fe-09eddeb5f7ae?source=cve"}],"moreVulnerabilities":0,"upgrade":{"recommended":"7.1.3"},"notes":["4 WordPress vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T22:37:50.784Z"}