Vulnerabilities
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
A critical vulnerability in the Bricksforge WordPress plugin, tracked as CVE-2026-85097, is being actively exploited by attackers.
Wordpress
Cyber Attacks
WordPress MU-Plugins exploited by hackers for stealthy attacks
Cybercriminals are leveraging the WordPress Must-Use Plugins (MU-Plugins) directory to inject and execute malicious code on websites while evading detection, posing a growing threat to website…
Vulnerabilities
WordPress Automatic plugin triggers millions of SQL injection attacks
A vulnerability in the WordPress Automatic plugin is being exploited to inject backdoors and web shells into websites.
Vulnerabilities
Hackers exploit WordPress plugin flaw to compromise 3,300 sites
Balada Injector malware infected over 7100 WordPress sites using a vulnerable version of the Popup Builder WordPress plugin.
Vulnerabilities
50K WordPress sites exposed to RCE attacks
The sites are exposed to attacks by critical bug in backup plugin.
Vulnerabilities
WordPress Elementor plugin flaw poses 1M sites at risk of hacking
The flaw was addressed with the release of the version 5.7.2.
Vulnerabilities
WordPress Plugin vulnerability exposes over 2M sites to cyberattacks
Advanced Custom Fields plugin for WordPress was found to have a security flaw.
Cyber Security
Zero-day in WPGateway Wordpress plugin exploited in attacks
Over 280,000 WordPress sites attacked using the vulnerability.
Vulnerabilities
WordPress sites force-updated to patch a critical plugin flaw
Ninja Forms is a forms builder plugin with more than 1 million installations.
Vulnerabilities
Vulnerability found in WordPress plugin with over 3 million installations
UpdraftPlus flaw allowed subscribers to download sensitive backups.
