WordPress 6.7.10

WordPress 6.7.10 has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Time-Of-Check Time-Of-Use (TOCTOU) Race Condition, behind 1 of the records (50%). Other recurring categories include Weak Encoding For Password.

Every one of the 2 issues recorded for WordPress 6.7.10 has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Umut Bayram.