3+ day, 17+ hour ago   (334+ words) Home » News » WordPress » Two significant security vulnerabilities are impacting over six million WordPress sites Researchers have uncovered alarming vulnerabilities that endanger the websites of more than six million WordPress users, suggesting an imminent risk of malicious takeovers. The investigation, carried…...

1+ week, 16+ hour ago   (589+ words) Hackers have been exploiting a critical-severity vulnerability in the Elementor Pro WordPress plugin to hack websites, WordPress security firm Defiant warns. A highly popular drag-and-drop website builder, Elementor is a free WordPress plugin with over 10 million installations. Elementor Pro is…...

1+ week, 2+ day ago   (506+ words) Security firm Wordfence published its full technical disclosure on September 2, 2026. Developer ServMask shipped a patch in version 7.110 on August 20 — thirteen days before the public advisory — but as of September 2, only about 35 percent of the install base had applied it. The…...

1+ week, 3+ day ago   (1076+ words) 1. Basic Information Article Title: WordPress backup plugin flaw exposes millions of sites to takeover attacks Publisher: BleepingComputer Publication Date: 2026-09-02 Original Source: BleepingComputer Related Sources: Wordfence technical analysis, Wordfence vulnerability record Related Malware / Threat Groups / CVEs / Products: CVE-2026-19949, WordPress, All-in-One WP…...

1+ week, 5+ day ago   (968+ words) Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 112 Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch Security Affairs newsletter Round 592 by Pierluigi Paganini – INTERNATIONAL EDITION Hack One Robot, Reach the Next: Unitree…...

2+ week, 15+ hour ago   (379+ words) Home » News » WordPress » Vulnerability in GiveWP WordPress Donation Plugin Allows Hackers to Run Server Commands Critical Vulnerability Discovered in GiveWP Plugin for WordPress A grave vulnerability has been uncovered in the GiveWP plugin for WordPress, presenting an opportunity for an…...

2+ week, 9+ hour ago   (123+ words) Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack,…...

2+ week, 3+ day ago   (340+ words) A critical vulnerability in the TranslatePress multilingual plugin, installed on over 400,000 WordPress sites, allows unauthenticated attackers to hijack administrator accounts and seize full control of affected websites. Tracked as CVE-2026-19632, the flaw carries a CVSS score of 9.8 (Critical) and affects…...

2+ week, 4+ day ago   (665+ words) Hackers are actively targeting WordPress websites running the miniOrange SAML 2.0 Single Sign On plugin, exploiting two critical vulnerabilities that can be chained to bypass authentication and obtain administrator access. That makes the plugin a particularly sensitive component. A vulnerability in…...

2+ week, 5+ day ago   (490+ words) A critical vulnerability has been identified in the widely used Pods WordPress plugin, which could allow unauthenticated attackers to take complete control of affected websites by escalating privileges to the administrator level. This vulnerability, tracked as CVE-2026-19598, carries a CVSS…...