{"api_version":"v1","generated_at":"2026-10-07T11:25:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-automattic-wordpress-59dc93e75616","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/wordpress","name":"WordPress","next_cursor":null,"observations":[{"affected":"WordPress: 7.1 \u2264 7.1.2, 7.0 \u2264 7.0.6, 6.9 \u2264 6.9.9, 6.8 \u2264 6.8.10, 6.7 \u2264 6.7.9, 6.6 \u2264 6.6.9","affected_versions_present":true,"cve_id":"CVE-2026-66666","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66666","fixed":"Update the WordPress WordPress wordpress to the latest available version (at least 7.1.3, 7.0.7, 6.9.10, 6.8.11, 6.7.10, 6.6.10).","last_modified":"2026-10-06T20:05:54.337Z","patch_url":"https://patchstack.com/database/wordpress/wordpress/wordpress/vulnerability/wordpress-wordpress-wordpress-7-1-2-sensitive-data-exposure-vulnerability?_s_id=cve","primary_source":"","published":"2026-10-06T17:48:37.371Z"},{"affected":"WordPress: 7.1 < 7.1.1, 7.0 \u2264 7.0.4, 6.9 \u2264 6.9.7, 6.8 \u2264 6.8.8, 6.7 \u2264 6.7.7, 6.6 \u2264 6.6.7, 6.5 \u2264 6.5.10, 6.4 \u2264 6.4.10, 6.3 \u2264 6.3.10, 6.2 \u2264 6.2.11, 6.1 \u2264 6.1.12, 6.0 \u2264 6.0.14, 5.9 \u2264 5.9.16, 5.8 \u2264 5.8.15, 5.7 \u2264 5.7.17, 5.6 \u2264 5.6.19, 5.5 \u2264 5.5.20, 5.4 \u2264 5.4.21, 5.3 \u2264 5.3.23, 5.2 \u2264 5.2.26, 5.1 \u2264 5.1.24, 5.0 \u2264 5.0.27, 4.9 \u2264 4.9.31, 4.8 \u2264 4.8.30, 4.7 \u2264 4.7.35","affected_versions_present":true,"cve_id":"CVE-2026-93485","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-93485","fixed":"Update the WordPress to the latest available version of it's version range: 7.1.1, 7.0.5, 6.9.8, 6.8.9, 6.7.8, 6.6.8, 6.5.11, 6.4.11, 6.3.11, 6.2.12, 6.1.13, 6.0.15, 5.9.17, 5.8.16, 5.7.18, 5.6.20, 5.5.21, 5.4.22, 5.3.24, 5.2.27, 5.1.25, 5.0.28, 4.9.32, 4.8.31, 4.7.36","last_modified":"2026-09-19T14:21:52.478Z","patch_url":"https://patchstack.com/database/wordpress/wordpress/wordpress/vulnerability/wordpress-wordpress-wordpress-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve","primary_source":"","published":"2026-09-18T06:00:05.645Z"},{"affected":"6.5 \u2264 6.5.4; 6.4 \u2264 6.4.4; 6.3 \u2264 6.3.4; 6.2 \u2264 6.2.5; 6.1 \u2264 6.1.6; 6.0 \u2264 6.0.8; 5.9 \u2264 5.9.9; 5.8 \u2264 5.8.9","affected_versions_present":true,"cve_id":"CVE-2024-32111","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32111","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:09:34.172Z","patch_url":"","primary_source":"","published":"2024-06-25T13:35:45.596Z"},{"affected":"6.5 \u2264 6.5.4; 6.4 \u2264 6.4.4; 6.3 \u2264 6.3.4; 6.2 \u2264 6.2.5; 6.1 \u2264 6.1.6; 6.0 \u2264 6.0.8; 5.9 \u2264 5.9.9","affected_versions_present":true,"cve_id":"CVE-2024-31111","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-31111","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-04-28T16:09:28.063Z","patch_url":"","primary_source":"","published":"2024-06-25T12:54:47.977Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"Automattic"}}