Most WordPress Vulnerabilities Are in Plugins. A Static Site Runs None.
Patchstack counted 11,334 new WordPress vulnerabilities in 2025. Six were in WordPress itself. The rest came with the plugins and themes people add.
Patchstack counted 11,334 new WordPress vulnerabilities in 2025. Six were in WordPress itself. The rest came with the plugins and themes people add.
