Is wp-cli/wp-cli 2.9 vulnerable?

Composer · 1 release from 2.9.0 to 2.9.0 · latest wp-cli/wp-cli is 2.12.0 · checked 1 Nov 2026

No known advisories in the last release

No. No wp-cli/wp-cli 2.9.x release has a known security advisory.

Which of your client projects are still on wp-cli/wp-cli 2.9?

NPMscan reads the lockfiles in every GitHub repo you pick, finds the exact wp-cli/wp-cli version each one installs, and checks it against these advisories. Each finding comes with the command that fixes it.

Scan a project free, no signup Or connect GitHub to scan every repo

Other wp-cli/wp-cli versions

wp-cli/wp-cli 2.12
wp-cli/wp-cli 2.11
wp-cli/wp-cli 2.10
wp-cli/wp-cli 2.8
wp-cli/wp-cli 2.7
wp-cli/wp-cli 2.6
wp-cli/wp-cli 1.5
wp-cli/wp-cli 1.4
wp-cli/wp-cli 1.3
wp-cli/wp-cli 1.2
wp-cli/wp-cli 1.1
wp-cli/wp-cli 1.0
All wp-cli/wp-cli advisories

Advisory data from OSV.dev (opens OSV.dev in a new tab), which includes the GitHub Advisory Database. Release list from the Composer registry. Refreshed daily.

Is wp-cli/wp-cli 2.9 vulnerable?

No known advisories in the last release

Is your project affected?

Which of your client projects are still on wp-cli/wp-cli 2.9?

Other wp-cli/wp-cli versions