CVE-2026-63030

exploitation · critical · Evidence score 90

Vendor

WordPress

Affected software

WordPress Core

Exploitation signal

Listed in CISA Known Exploited Vulnerabilities

EPSS

0.95605

WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.