HIGH

Acronis Patches Exploited Vulnerability in cPanel Backup Plugin

SecurityWeek • Sep 16, 2026

HIGH

Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)

Help Net Security • Sep 16, 2026

HIGH

5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin

Wordfence • Sep 01, 2026

HIGH

Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin

Wordfence • Aug 27, 2026

HIGH

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Wordfence • Aug 27, 2026

HIGH

400,000 WordPress Sites Affected by Account Takeover Vulnerability in TranslatePress WordPress Plugin

Wordfence • Aug 25, 2026

CRITICAL

WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities

SecurityWeek • Aug 25, 2026

CRITICAL

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

The Hacker News • Aug 17, 2026

CRITICAL

Simple Job Board ≤ 2.11.0 - Unauthenticated RCE (CVE-2024-1813)

Reddit r/netsec • Jul 28, 2026

LOW

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 22, 2026 to June 28, 2026)

Wordfence • Jul 02, 2026

MEDIUM

Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data

SecurityWeek • Jun 22, 2026

CRITICAL

Critical Unauthenticated Arbitrary File Deletion Vulnerability Patched in Avada Builder WordPress Plugin

Wordfence • Jun 18, 2026

CRITICAL

Attackers Hijack Popular WordPress Plugins to Deploy Backdoors

Infosecurity Magazine • Jun 15, 2026

CRITICAL

WordPress Kirki plugin vulnerability allows account takeover

SC Media • Jun 04, 2026

CRITICAL

Everest Forms Pro Vulnerability Allows Remote Code Execution on WordPress Sites

Infosecurity Magazine • Jun 04, 2026

CRITICAL

Attackers Actively Exploiting Critical Vulnerability in Burst Statistics Plugin

Wordfence • Jun 02, 2026

MEDIUM

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 18, 2026 to May 24, 2026)

Wordfence • May 28, 2026

CRITICAL

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin

BleepingComputer • May 14, 2026

MEDIUM

Arbitrary code pushed by long concealed backdoor in widely used WordPress redirect add-on

SC Media • May 01, 2026

HIGH

Popular WordPress redirect plugin hid dormant backdoor for years

BleepingComputer • Apr 29, 2026

CRITICAL

Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

The Hacker News • Apr 10, 2026

HIGH

Smart Slider updates hijacked to push malicious WordPress, Joomla versions

BleepingComputer • Apr 09, 2026

CRITICAL

Critical Vulnerability in Ninja Forms Exposes WordPress Sites

Infosecurity Magazine • Apr 08, 2026

CRITICAL

Hackers exploit critical flaw in Ninja Forms WordPress plugin

BleepingComputer • Apr 07, 2026

HIGH

800,000 WordPress Sites Affected by Arbitrary File Read Vulnerability in Smart Slider 3 WordPress Plugin

Wordfence • Mar 26, 2026

CRITICAL

Critical WordPress Backup Plugin Flaw Leaves 800,000 Sites Exposed to Remote Code Execution

Web Discovery • Feb 10, 2026

MEDIUM

Nearly a million WordPress websites could be at risk from this serious plugin security flaw

Web Discovery • Feb 10, 2026

CRITICAL

CVE-2026-1357 Security Vulnerability Analysis & Exploit Details

Web Discovery • Feb 10, 2026

CRITICAL

Rapid7

Web Discovery • Feb 10, 2026

HIGH

WordPress Security Bulletin: Migration, Backup, Staging 6 WPvivid Backup & Migration Plugin Vulnerability (CVE-2026-1357) | Freshy

Web Discovery • Feb 10, 2026

INFO

Introducing IDA-Free-MCP: mcp server for IDA Free version (native)

Reddit r/netsec • Feb 15, 2026

CRITICAL

WordPress plugin with 900k installs vulnerable to critical RCE flaw

BleepingComputer • Feb 12, 2026

MEDIUM

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 26, 2026 to February 1, 2026)

Wordfence • Feb 05, 2026