wordpress
183 articles with this tag
MEDIUM
LOW
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
INFO
HIGH
INFO
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
MEDIUM
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
INFO
HIGH
HIGH
MEDIUM
MEDIUM
HIGH
HIGH
MEDIUM
HIGH
CRITICAL
INFO
CRITICAL
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
INFO
CRITICAL
CRITICAL
MEDIUM
MEDIUM
LOW
MEDIUM
CRITICAL
MEDIUM
MEDIUM
CRITICAL
MEDIUM
MEDIUM
CRITICAL
HIGH
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)
WordPress adds automated security checks to block risky plugin releases
Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin
Wordfence Argus Finds Unauthenticated Arbitrary File Upload Vulnerability in Gravity Forms
5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin
Wordfence Argus: Moving Beyond Human Research Capability
Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
Critical vulnerability in Elementor Pro exploited for RCE attacks
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)
SQL injection vulnerability in WordPress plugin affects millions of sites
Critical Elementor Pro flaw exploited to take over WordPress sites
Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin
Wordfence Argus Finds Unauthenticated Arbitrary File Upload Vulnerability in Gravity Forms
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
GiveWP WordPress donation plugin flaw lets hackers execute server commands
Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)
[NEU] [mittel] WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen
Wordfence Argus Finds Complex 6 Step Critical RCE in Avada Theme with 1 Million Sales
400,000 WordPress Sites Affected by Account Takeover Vulnerability in TranslatePress WordPress Plugin
WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Hackers target WordPress sites in miniOrange auth bypass attacks
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 10, 2026 to August 16, 2026)
100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Pods WordPress Plugin
Critical vulnerability in Elementor Pro allows unauthenticated file upload and RCE
Critical Arbitrary File Upload Vulnerability Patched in Elementor Pro WordPress Plugin
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect
300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
600,000 WordPress Sites Affected by Arbitrary File Upload Vulnerability in Forminator Forms WordPress Plugin
WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover
[NEU] [hoch] WP Royal Royal Elementor Addons: Mehrere Schwachstellen
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)
Vulnérabilité dans WordPress (13 août 2026)
WordPress 7.0.4 Patches Remote Code Execution Vulnerability
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
DSA-6427-1 wordpress - security update
WordPress Plugins Compromised Without a Single File Change
PSA: Supply Chain Compromise in BdThemes Ecosystem via Poisoned API Response
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 27, 2026 to August 2, 2026)
Multiples vulnérabilités dans WordPress (07 août 2026)
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP
Wordfence Bug Bounty Program Monthly Report – April 2026
WP2Shell RCE
WordPress Core Unauthenticated RCE (WP2Shell)
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)
WP2Shell WordPress Exploit Technical Analysis and Real Attack Data
Wordfence PRISM Detected Backdoored WordPress Plugin within Two Hours of it Being Introduced
Simple Job Board ≤ 2.11.0 - Unauthenticated RCE (CVE-2024-1813)
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)
WP2Shell: Hands-On Lab Reproducing the Pre-Auth WordPress Core RCE
wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution
What happens if you visit a WordPress site hacked through wp2shell?
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
wp2shell Aftermath: The First Critical Unauthenticated WordPress Core RCE in Nearly a Decade
Attackers pummel critical WordPress vuln to create all sorts of mischief
'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core
Researchers Build WordPress Exploit Using OpenAI's GPT
Patch now: WordPress REST API bug allows remote code execution
Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25
Multiples vulnérabilités dans WordPress (20 juillet 2026)
Multiples vulnérabilités dans WordPress (20 juillet 2026)
WP2Shell WordPress Vulnerabilities Exploited in the Wild
wp2shell: a defender’s guide (CVE-2026-63030 + CVE-2026-60137) with a list of forensic artifacts, a compromise scanner WordPress plugin and a free Chrome/Edge/Firefox browser extension to in-browser check if a website has been patched.
wp2shell (CVE-2026-63030) update: public working exploit now available for the WordPress core pre-auth RCE
wp2shell (CVE-2026-63030): Pre-Auth RCE Chain in WordPress Core - Analysis and Open-Source Scanner
WordPress Core "wp2shell" RCE flaws get public exploits, patch now
NCSC-2026-0250 [1.00] [H/M] Kwetsbaarheden verholpen in WordPress door Automattic
wp2shell: Pre Authentication RCE in WordPress Core
PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 6, 2026 to July 12, 2026)
We built a vulnerability vending machine: AI tokens in, zero-days out
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
[webapps] WordPress Bricks Builder Theme - RCE
[webapps] KeepInMind 0.8.4.2 - Stored XSS
[webapps] WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 22, 2026 to June 28, 2026)
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 15, 2026 to June 21, 2026)
22nd June – Threat Intelligence Report
WordPress plugin Gravity SMTP exploited for sensitive information disclosure
Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown
Critical Unauthenticated Arbitrary File Deletion Vulnerability Patched in Avada Builder WordPress Plugin
Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp