{"product":"wordpress","productName":"WordPress","version":"5.3.26","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":false,"cycle":"5.3"},"counts":{"critical":0,"high":2,"medium":2,"low":1,"unknown":0},"vulnerabilities":[{"id":"CVE-2026-87902","severity":"high","score":8.1,"kev":true,"fixedIn":"7.1.2","advisoryUrl":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp"},{"id":"CVE-2026-65640","severity":"high","score":8.8,"kev":false,"fixedIn":"7.0.4","advisoryUrl":"https://wordpress.org/news/2026/08/wordpress-7-0-4-release/"},{"id":"CVE-2022-3590","severity":"medium","score":5.9,"kev":false,"advisoryUrl":"https://wpscan.com/vulnerability/c8814e6e-78b3-4f63-a1d3-6906a84c1f11"},{"id":"CVE-2023-5692","severity":"medium","score":5.3,"kev":false,"advisoryUrl":"https://www.wordfence.com/threat-intel/vulnerabilities/id/6e6f993b-ce09-4050-84a1-cbe9953f36b1?source=cve"},{"id":"CVE-2025-54352","severity":"low","score":3.7,"kev":false,"advisoryUrl":"https://www.imperva.com/blog/beware-a-threat-actor-could-steal-the-titles-of-your-private-and-draft-wordpress-posts/"}],"moreVulnerabilities":0,"upgrade":{"recommended":"7.1.3"},"notes":["4 WordPress vulnerabilities are still under review and not included in this verdict."],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T21:52:51.101Z"}