Word press

OptinMonster Plugin Vulnerability Exposes 1.2 Million WordPress Sites to Cyberattacks

A large-scale supply chain attack targeting the popular OptinMonster WordPress plugin has exposed more than 1.2 million websites to active…

4 months ago

WordPress Plugin Flaw Opens Door to Privilege Escalation Attacks Across 500,000+ Sites

A critical security flaw in the Kirki – Freeform Page Builder, Website Builder & Customizer WordPress plugin is exposing sites…

5 months ago

1 Million WordPress Websites Exposed by Avada Builder Security Vulnerabilities

A widely used WordPress plugin powering over one million websites has been found vulnerable to two serious security flaws that…

5 months ago

Backdoored WordPress Plugin Abuses Remote Update Checker for Silent Code Delivery

A long-dormant backdoor has been uncovered in the "Quick Page/Post Redirect Plugin," a popular WordPress add-on with over 70,000 active…

6 months ago

GrayCharlie Hacks WordPress Sites, Spreads NetSupport RAT and Stealc Malware

GrayCharlie is abusing compromised WordPress sites to silently load malicious JavaScript that pushes NetSupport RAT, often followed by Stealc and…

8 months ago

CleanTalk Plugin for WordPress Exposes Sites to Authorization Bypass via Reverse DNS

A critical vulnerability in the popular CleanTalk Spam Protection plugin for WordPress exposes websites to complete takeover. Tracked as CVE-2026-1490,…

8 months ago

Critical Elementor Plugin Flaw Allows Attackers to Seize WordPress Admin Control

A severe privilege escalation vulnerability in the King Addons for Elementor WordPress plugin has exposed thousands of websites to complete…

11 months ago

WordPress Plugin Vulnerability Lets Attackers Read Any Server File

A critical security flaw has been discovered in the Anti-Malware Security and Brute-Force Firewall WordPress plugin, putting more than 100,000…

12 months ago

400,000 WordPress Websites Exposed by Post SMTP Plugin Vulnerability

A critical security vulnerability has been discovered in the popular Post SMTP plugin for WordPress, potentially exposing over 400,000 websites…

1 year ago

Hackers Compromise WordPress GravityForms Plugin with Malicious Code Injection

Hackers have targeted the popular WordPress plugin Gravity Forms, injecting malicious code into versions downloaded from the official gravityforms.com domain.…

1 year ago