Monitoring Dictionary
Vulnerability
Definition
A vulnerability is a weakness in software that attackers can abuse to break confidentiality, integrity, or availability.
Also called: CVE, security vulnerability
Why it matters for WordPress
Most WordPress breaches start with a known vulnerable plugin or theme, not a brand-new zero-day against core. Reading severity and fixed versions helps you decide whether to update today or tonight.
How it shows up in practice
- CVE identifiers and plugin changelog “security fix” notes
- Scanner results listing component, version, and severity
- Public write-ups with proof-of-concept details
What to do
- Know what you have installed and which versions.
- Update when a fix is available; remove abandonware.
- If you cannot update yet, mitigate (WAF rules, disable the plugin, restrict access).
- After patching, verify the version and watch logs briefly.
Guide: WordPress vulnerabilities. Feature: Vulnerability scanner.
Go deeper
Want the full walkthrough?
This page stays short on purpose. The guide covers steps, examples, and what to check on a live WordPress site.
Open full guideRelated terms
Nearby ideas in the dictionary
- Plugin supply chain Plugin supply-chain risk is when trusted plugin code or updates become a path for attackers.
- Privilege escalation Privilege escalation is gaining higher access than intended, such as a subscriber becoming an administrator.
- Security audit A security audit is a structured review of a site’s risks, misconfigurations, and recommended fixes.