498 WordPress plugin and theme flaws disclosed last week
Original title：Wordfence Intelligence Weekly WordPress Vulnerability Report (October 12, 2026 to October 18, 2026)
What happened
Wordfence reported 498 vulnerabilities across 328 plugins and 23 themes last week. 67 are still unpatched, including 23 Critical and 153 High severity issues.
Who is affected
- Anyone running a WordPress site
- Agencies managing many plugins
What to do
Check whether your plugins or themes are on the list and update if a fix exists. For unpatched ones, consider disabling or replacing them.
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| WordPress プラグイン328件・テーマ23件(個別名は要確認、例: Ad Inserter、Backuply、bbPress など) | 要確認 | 要確認(431件は修正済み、67件は未修正) |
Why this flag
週次のまとめで、悪用の確認は記載がありません。個別の影響は使用中のプラグイン次第のため、条件付きの更新確認として YELLOW を提案します。
Yellow flag: caution, slow down — Conditional updates, investigation or recovery follow-ups, and regulatory deadlines.
Sources
- Source：Wordfence Blog ↗