CWE-89

WordPress Core Critical SQL Injection Vulnerability CVE-2026-60137 Added to CISA KEV Under Active Exploitation

CISA incorporates WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 (CVSS 9.8) into KEV catalog following active in-the-wild web attacks.