WordPress Mixed Content: 38.1% of Sites Still Fail Clean HTTPS
📊 38.1% of scanned small-business WordPress sites failed the mixed content check. (Based on 65690 scans across 37513 unique small-business WordPress s...
Practical insights on website and WordPress security for busy teams.
📊 38.1% of scanned small-business WordPress sites failed the mixed content check. (Based on 65690 scans across 37513 unique small-business WordPress s...
In agriculture, trust and uptime matter. But our latest research reveals a widespread problem: 61.7% of agriculture WordPress security scans landed in...
63.1% of entertainment sites scanned earned a D or F in security configuration over the last 90 days. Out of 2,331 scans across 1,511 unique entertain...
Healthcare organizations are entrusted with protecting more than just patient details—they manage sensitive schedules, appointment systems, billing, a...
Roofing businesses are heavily invested in their online presence, often relying on WordPress sites to generate leads and build credibility. But how do...
Between August 30, 2026 and September 29, 2026, ThreatSpot scans found an enforced Content-Security-Policy header on fewer than one in a thousand of 8...
📊 62.9% of small-business WordPress sites scanned in the past 90 days landed below "Good" for cookie security.
📊 20.8% of WordPress sites expose their underlying server version in HTTP headers.
📊 73.6% of security scans for legal sector WordPress sites scored D or F.
Dental practice websites face higher trust expectations than most small businesses—yet in 7093 dental WordPress security scans across 3966 unique site...
CVE-2024-27834 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-118527 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-119977 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-111357 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-76418 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-97229 is an actively exploited vulnerability listed in the CISA KEV catalog with a 65% exploit probability.
CVE-2026-46300 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-41709 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-109619 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-109618 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-111497 is an actively exploited vulnerability listed in the CISA KEV catalog with a 83% exploit probability.
CVE-2026-48356 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 47%.
CVE-2026-110936 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-96652 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-96654 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-96655 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-96656 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-106931 is an actively exploited vulnerability listed in the CISA KEV catalog affecting SiteGuard WP Plugin, SiteGuard WP Plugin, SiteGuard WP Plugin.
CVE-2026-102764 is an actively exploited vulnerability listed in the CISA KEV catalog with a 78% exploit probability.
CVE-2025-61624 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-21589 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-105133 is an actively exploited vulnerability listed in the CISA KEV catalog with a 79% exploit probability.
CVE-2026-105134 is an actively exploited vulnerability listed in the CISA KEV catalog with a 82% exploit probability.
CVE-2015-3306 is an actively exploited vulnerability listed in the CISA KEV catalog with a 99% exploit probability.
CVE-2021-3199 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 30%.
CVE-2023-22894 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2016-3081 is an actively exploited vulnerability listed in the CISA KEV catalog with a 97% exploit probability.
CVE-2015-5477 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-88779 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-102489 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-102490 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-76504 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 39%.
CVE-2026-104286 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-86950 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-88771 is an actively exploited vulnerability listed in the CISA KEV catalog with a 83% exploit probability.
CVE-2026-88772 is an actively exploited vulnerability listed in the CISA KEV catalog with a 78% exploit probability.
CVE-2026-87902 is an actively exploited vulnerability listed in the CISA KEV catalog with a 96% exploit probability, affecting WordPress Core, WordPress Core, WordPress Core.
CVE-2026-65660 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-67279 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-71362 is an actively exploited vulnerability listed in the CISA KEV catalog with a 90% exploit probability.
CVE-2026-5430 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-85102 is an actively exploited vulnerability listed in the CISA KEV catalog with a 54% exploit probability.
CVE-2026-93616 is an actively exploited vulnerability listed in the CISA KEV catalog with a 92% exploit probability.
CVE-2026-94127 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-93952 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-7273 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-87886 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-39682 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-53266 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-39964 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-76460 is an actively exploited vulnerability listed in the CISA KEV catalog with a 76% exploit probability.
CVE-2026-58704 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-76461 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-85706 is an actively exploited vulnerability listed in the CISA KEV catalog with a 97% exploit probability.
CVE-2026-42018 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-42016 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-84869 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-87491 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-67277 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-86060 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-20079 is an actively exploited vulnerability listed in the CISA KEV catalog with a 89% exploit probability.
CVE-2025-25249 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-19490 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 33%.
CVE-2026-86218 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-75650 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-85046 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-83549 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-83548 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-9586 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-82329 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-49869 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-48710 is an actively exploited vulnerability listed in the CISA KEV catalog with a 70% exploit probability.
CVE-2026-59822 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-81578 is an actively exploited vulnerability listed in the CISA KEV catalog with a 85% exploit probability.
CVE-2026-82078 is an actively exploited vulnerability listed in the CISA KEV catalog with a 63% exploit probability.
CVE-2026-60004 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-66384 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-53362 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2023-49105 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 43%.
CVE-2019-1068 is an actively exploited vulnerability listed in the CISA KEV catalog with a 57% exploit probability.
CVE-2026-8452 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2022-0995 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2015-5287 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2015-3246 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2021-23758 is an actively exploited vulnerability listed in the CISA KEV catalog with a 83% exploit probability.
CVE-2026-21962 is an actively exploited vulnerability listed in the CISA KEV catalog with a 73% exploit probability.
CVE-2026-33824 is an actively exploited vulnerability listed in the CISA KEV catalog with a 77% exploit probability.
CVE-2025-62593 is an actively exploited vulnerability listed in the CISA KEV catalog with a 60% exploit probability.
CVE-2026-8037 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-34486 is an actively exploited vulnerability listed in the CISA KEV catalog with a 99% exploit probability.
CVE-2025-68686 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-63030 vulnerability alert affecting WordPress Core.
CVE-2026-0770 is an actively exploited vulnerability listed in the CISA KEV catalog with a 63% exploit probability.
CVE-2026-39808 is an actively exploited vulnerability listed in the CISA KEV catalog with a 93% exploit probability.
CVE-2026-25089 is an actively exploited vulnerability listed in the CISA KEV catalog with a 76% exploit probability.
CVE-2026-48939 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-56291 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-56164 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2023-4346 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-46817 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2008-4128 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 34%.
CVE-2026-48558 is an actively exploited vulnerability listed in the CISA KEV catalog with a 81% exploit probability.
CVE-2026-20230 is an actively exploited vulnerability listed in the CISA KEV catalog with a 89% exploit probability.
CVE-2025-67038 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-20253 is an actively exploited vulnerability listed in the CISA KEV catalog with a 97% exploit probability.
CVE-2026-20262 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-48907 is an actively exploited vulnerability listed in the CISA KEV catalog with a 85% exploit probability.
CVE-2026-54420 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-35273 is an actively exploited vulnerability listed in the CISA KEV catalog with a 97% exploit probability.
CVE-2026-10520 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-20245 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-7473 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-11645 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-50751 is an actively exploited vulnerability listed in the CISA KEV catalog with a 85% exploit probability.
CVE-2026-42271 is an actively exploited vulnerability listed in the CISA KEV catalog with a 91% exploit probability.
CVE-2026-28318 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 44%.
CVE-2026-45247 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2022-0492 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-48595 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-0257 is an actively exploited vulnerability listed in the CISA KEV catalog with a 96% exploit probability.
CVE-2024-21182 is an actively exploited vulnerability listed in the CISA KEV catalog with a 74% exploit probability.
CVE-2025-34291 is an actively exploited vulnerability listed in the CISA KEV catalog with a 93% exploit probability.
CVE-2010-0806 is an actively exploited vulnerability listed in the CISA KEV catalog with a 82% exploit probability.
CVE-2010-0249 is an actively exploited vulnerability listed in the CISA KEV catalog with a 92% exploit probability.
CVE-2009-3459 is an actively exploited vulnerability listed in the CISA KEV catalog with a 87% exploit probability.
CVE-2009-1537 is an actively exploited vulnerability listed in the CISA KEV catalog with a 51% exploit probability.
CVE-2008-4250 is an actively exploited vulnerability listed in the CISA KEV catalog with a 99% exploit probability.
CVE-2026-31431 is an actively exploited vulnerability listed in the CISA KEV catalog with a 98% exploit probability.
CVE-2024-1708 is an actively exploited vulnerability listed in the CISA KEV catalog with a 95% exploit probability.
CVE-2026-32202 is an actively exploited vulnerability listed in the CISA KEV catalog with a 71% exploit probability.
CVE-2024-57726 is an actively exploited vulnerability listed in the CISA KEV catalog with a 66% exploit probability.
CVE-2024-57728 is an actively exploited vulnerability listed in the CISA KEV catalog with a 64% exploit probability.
CVE-2024-7399 is an actively exploited vulnerability listed in the CISA KEV catalog with a 92% exploit probability.
CVE-2025-29635 is an actively exploited vulnerability listed in the CISA KEV catalog with a 88% exploit probability.
CVE-2026-39987 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-33825 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2024-27199 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2025-32975 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-20128 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-48700 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2023-27351 is an actively exploited vulnerability listed in the CISA KEV catalog with a 78% exploit probability.
CVE-2025-2749 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-20133 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 31%.
CVE-2026-20122 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-34197 is an actively exploited vulnerability listed in the CISA KEV catalog with a 98% exploit probability.
CVE-2026-32201 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 43%.
CVE-2009-0238 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 43%.
CVE-2026-34621 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-21643 is an actively exploited vulnerability listed in the CISA KEV catalog with a 98% exploit probability.
CVE-2020-9715 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 33%.
CVE-2023-36424 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2023-21529 is an actively exploited vulnerability listed in the CISA KEV catalog with a 59% exploit probability.
CVE-2025-60710 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2012-1854 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-1340 is an actively exploited vulnerability listed in the CISA KEV catalog with a 99% exploit probability.
CVE-2026-35616 is an actively exploited vulnerability listed in the CISA KEV catalog with a 94% exploit probability.
CVE-2026-3502 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-5281 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-3055 is an actively exploited vulnerability listed in the CISA KEV catalog with a 91% exploit probability.
CVE-2025-53521 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-33634 is an actively exploited vulnerability listed in the CISA KEV catalog with a 60% exploit probability.
CVE-2026-33017 is an actively exploited vulnerability listed in the CISA KEV catalog with a 96% exploit probability.
CVE-2025-31277 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-43520 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-43510 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-54068 is an actively exploited vulnerability listed in the CISA KEV catalog with a 96% exploit probability.
CVE-2025-32432 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-20131 is an actively exploited vulnerability listed in the CISA KEV catalog exploit probability 44%.
CVE-2026-20963 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-66376 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-47813 is an actively exploited vulnerability listed in the CISA KEV catalog with a 63% exploit probability.
CVE-2026-3909 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2026-3910 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2025-68613 is an actively exploited vulnerability listed in the CISA KEV catalog with a 99% exploit probability.
CVE-2023-41974 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2021-30952 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2023-43000 is an actively exploited vulnerability listed in the CISA KEV catalog patching is recommended.
CVE-2021-22681 is an actively exploited vulnerability listed in the CISA KEV catalog with a 64% exploit probability.
CVE-2017-7921 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
CVE-2026-1603 is an actively exploited vulnerability listed in the CISA KEV catalog with a 88% exploit probability.
CVE-2025-26399 is an actively exploited vulnerability listed in the CISA KEV catalog with a 91% exploit probability.
CVE-2021-22054 is an actively exploited vulnerability listed in the CISA KEV catalog with a 100% exploit probability.
Get practical security tips and product updates delivered to your inbox.