WordPress vulnerabilities: 11,334 per year, with the server blocking 12 per cent of them
In the WordPress world, 11,334 new vulnerabilities were disclosed in 2025 — 42 per cent more than the previous year. Of these, 91 per cent were in plugins and six were in the WordPress core. However, one figure is even more important: the servers’ own security measures blocked 12 per cent of attacks targeting WordPress. This article explains what these figures mean for a typical business website and what you can do about them yourself.