[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNzg0hfUlunnbKaWPaKkgHIQpzqozimIvYrw3eMUYSRI":3,"g5a-risk:CVE-2026-63030":143},{"success":4,"data":5,"meta":140},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":27,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":41,"references":42,"referencesCount":58,"weaknesses":59,"weaknessesCount":41,"isActivelyExploited":4,"cisaInfo":68,"otxData":27,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":111,"notableEvents":112},"CVE-2026-63030","What is CVE-2026-63030?","WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.","WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP...","2026-07-17T20:17:28.49","2026-10-08T10:35:50.787",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":32},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"contact@wpscan.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],[],0.10649,[33,33,33,33,33,33,33],"Critical",[37],{"vendor":38,"product":38,"version":39,"criteria":40,"vulnerable":4},"wordpress","*","cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",1,[43,48,53],{"url":44,"source":45,"tags":46},"https:\u002F\u002Fgithub.com\u002FWordPress\u002Fwordpress-develop\u002Fsecurity\u002Fadvisories\u002FGHSA-ff9f-jf42-662q","GitHub",[47],"Vendor Advisory",{"url":49,"source":50,"tags":51},"https:\u002F\u002Fwordpress.org\u002Fnews\u002F2026\u002F07\u002Fwordpress-7-0-2-release\u002F","Wordpress",[52],"Release Notes",{"url":54,"source":55,"tags":56},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63030","CISA",[57],"US Government Resource",3,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-436","Interpretation Conflict","Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.","This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.","Incomplete","Class","Simple",{"shortDescription":69,"requiredAction":69,"vulnerabilityName":69,"dateAdded":27},"",[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2026-63030? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-63030, a critical severity cyber security vulnerability from 2026. WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is ...","CVE-2026-63030, CVE-2026-63030 vulnerability, CVE-2026-63030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, wordpress security, wordpress vulnerability","\u002Fwhat-is\u002Fcve-2026-63030",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-63030","Cybersecurity","CVE-2026-63030, CVE-2026-63030 vulnerability, CVE-2026-63030 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":27,"Negate":27,"Nodes":98},[99],{"Operator":100,"Negate":101,"CPEMatch":102},"OR",false,[103,107],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":104,"VersionStartExcluding":27,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":27},"D5B37C71-893E-460E-8790-88EF786DF56E","6.9","6.9.5",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":108,"VersionStartExcluding":27,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":27},"02352A0A-26C7-4ABC-83F6-8493C6A3FB5C","7.0","7.0.2",[],[113,120,127,133],{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"2c0c53b4-05f3-40d8-a346-6c673146553f","NEW_NVD","2026-07-18T04:01:47.792085+00:00","New CVE added to NVD","Published to NVD","blue",{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"dc8fe6b6-fd42-4d4c-91fa-e62b0bc1c4a8","NEW_CISA","2026-07-22T04:01:03.69577+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":128,"eventType":129,"eventTime":130,"details":131,"label":132,"color":126},"fa78bd8c-c2e0-4146-b7c5-c7d04a19688a","HIGH_EPSS_DELTA","2026-07-23T04:04:38.506991+00:00","Daily EPSS score increased by 0.297 on 2026-07-19","EPSS Score Increased",{"id":134,"eventType":135,"eventTime":136,"details":137,"label":138,"color":139},"60c07b84-9fb6-420f-84c7-d4be2f9a96fe","LOW_EPSS_DELTA","2026-09-25T04:05:18.341152+00:00","Daily EPSS score decreased by 0.872 on 2026-07-19","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":141,"version":142},1792276226820,"2.0",{"score":144,"band":35,"action":145,"scoredAt":146},90,"Emergency patch","2026-10-16T07:15:12.173176+00:00"]