Cybercriminals are leveraging the WordPress Must-Use Plugins (MU-Plugins) directory to inject and execute malicious code on websites while evading detection, posing a growing ...

Hackers are targeting a critical severity vulnerability in the WP Automatic plugin for WordPress to create user accounts with administrative privileges and to ...

Hackers are breaching WordPress sites by exploiting a vulnerability in outdated versions of the Popup Builder plugin, infecting over 3,300 websites with malicious ...

A critical severity vulnerability in a WordPress plugin with over 90,000 installs can let attackers gain remote code execution to fully compromise vulnerable ...

One of WordPress’s most popular Elementor plugins, “Essential Addons for Elementor,” was affected by an unauthenticated privilege escalation issue which could allow remote ...

A new vulnerability was discovered in the Advanced Custom Fields plugin for WordPress and the users are recommended to update version 6.1.6 The ...

The Wordfence Threat Intelligence team warned that a zero-day flaw in the latest version of a WordPress premium plugin called WPGateway is being ...

WordPress websites using a widely used plugin named Ninja Forms was updated automatically to rectify a critical security vulnerability which is believed to ...

UpdraftPlus, a WordPress plugin with over 3 million installations had a vulnerability that allows any logged-in user, including subscriber-level users, to download backups ...

Two critical and high severity security vulnerabilities in the popular “All in One” SEO WordPress plugin exposed more than 3 million websites to ...