CVE-2026-93485: WordPress 7.1, 7.0 through 7.0.4; status changes: 7.0.5 — unaffected, 6.9 through 6.9.7; status changes: 6.9.8 —…

Affected technology

WordPress · 7.1, 7.0 through 7.0.4; status changes: 7.0.5 — unaffected, 6.9 through 6.9.7; status changes: 6.9.8 — unaffected, 6.8 through 6.8.8; status changes: 6.8.9 — unaffected, 6.7 through 6.7.7; status changes: 6.7.8 — unaffected, 6.6 through 6.6.7; status changes: 6.6.8 — unaffected, 6.5 through 6.5.10; status changes: 6.5.11 — unaffected, 6.4 through 6.4.10; status changes: 6.4.11 — unaffected, 6.3 through 6.3.10; status changes: 6.3.11 — unaffected, 6.2 through 6.2.11; status changes: 6.2.12 — unaffected, 6.1 through 6.1.12; status changes: 6.1.13 — unaffected, 6.0 through 6.0.14; status changes: 6.0.15 — unaffected, 5.9 through 5.9.16; status changes: 5.9.17 — unaffected, 5.8 through 5.8.15; status changes: 5.8.16 — unaffected, 5.7 through 5.7.17; status changes: 5.7.18 — unaffected, 5.6 through 5.6.19; status changes: 5.6.20 — unaffected, 5.5 through 5.5.20; status changes: 5.5.21 — unaffected, 5.4 through 5.4.21; status changes: 5.4.22 — unaffected, 5.3 through 5.3.23; status changes: 5.3.24 — unaffected, 5.2 through 5.2.26; status changes: 5.2.27 — unaffected, 5.1 through 5.1.24; status changes: 5.1.25 — unaffected, 5.0 through 5.0.27; status changes: 5.0.28 — unaffected, 4.9 through 4.9.31; status changes: 4.9.32 — unaffected, 4.8 through 4.8.30; status changes: 4.8.31 — unaffected, 4.7 through 4.7.35; status changes: 4.7.36 — unaffected
Automattic

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.