Vulnerabilities
Hackers exploit WordPress plugin flaw to compromise 3,300 sites
Hackers are breaching WordPress sites by exploiting a vulnerability in outdated versions of the Popup Builder plugin, infecting over 3,300 websites with malicious ...
Vulnerabilities
50K WordPress sites exposed to RCE attacks
A critical severity vulnerability in a WordPress plugin with over 90,000 installs can let attackers gain remote code execution to fully compromise vulnerable ...
Vulnerabilities
WordPress Elementor plugin flaw poses 1M sites at risk of hacking
One of WordPress’s most popular Elementor plugins, “Essential Addons for Elementor,” was affected by an unauthenticated privilege escalation issue which could allow remote ...
Vulnerabilities
WordPress Plugin vulnerability exposes over 2M sites to cyberattacks
A new vulnerability was discovered in the Advanced Custom Fields plugin for WordPress and the users are recommended to update version 6.1.6 The ...
Cyber Security
Zero-day in WPGateway WordPress plugin exploited in attacks
The Wordfence Threat Intelligence team warned that a zero-day flaw in the latest version of a WordPress premium plugin called WPGateway is being ...
Vulnerabilities
WordPress sites force-updated to patch a critical plugin flaw
WordPress websites using a widely used plugin named Ninja Forms was updated automatically to rectify a critical security vulnerability which is believed to ...
Vulnerabilities
Vulnerability found in WordPress plugin with over 3 million installations
UpdraftPlus, a WordPress plugin with over 3 million installations had a vulnerability that allows any logged-in user, including subscriber-level users, to download backups ...
Vulnerabilities
800K WordPress sites still impacted by critical SEO plugin flaw
Two critical and high severity security vulnerabilities in the popular “All in One” SEO WordPress plugin exposed more than 3 million websites to ...
