Defiant

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 5, 2026
Last mentionedSep 18, 2026

Timeline

3 articles · newest first

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeek roundup: ransomware developer sentenced, critical SAP flaw CVE-2026-44756, PhantomRaven npm info-stealer, WordPress mass exploitation, and AI agent security findings.

SecurityWeekSep 18, 14:25 UTC · Sep 18, 2026IndustryExploitedCVE-2026-44756 CVE-2026-15315 CVE-2026-153164

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

Two unauthenticated CVSS 9.8 code-injection and PHP object injection flaws in The Events Calendar plugin expose 200,000+ WordPress sites to RCE and takeover.

SecurityWeekSep 16, 11:32 UTC · Sep 16, 2026VulnerabilityCVE-2026-78159 CVE-2026-780063 · 1 read

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Attackers are actively exploiting critical file-upload flaw CVE-2026-32475 in Elementor Pro, hacking WordPress sites; Defiant has blocked over 190,000 exploit attempts since patching.

SecurityWeekSep 5, 13:00 UTC · Sep 5, 2026Exploit / PoCExploitedCVE-2026-324753

Related CVEs

by mentions

CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-780061%9.8
Unauthenticated RCE in The Events Calendar WordPress Plugin
published Sep 12, 2026StellarWP (The Events Calendar) The Events Calendar WordPress pluginPoC ×2
CVE-2026-781599.8
Unauthenticated Remote Code Execution in The Events Calendar WordPress Plugin
published Sep 12, 2026StellarWP The Events Calendar (WordPress plugin)
CVE-2026-324752%9.0
Unauthenticated PHP File Upload (RCE) in Elementor Pro WordPress Plugin
published Aug 19, 2026Elementor Pro (WordPress plugin)
CVE-2026-15315<1%8.7
Authentication Bypass via Challenge Validation Flaw in TP-Link Tapo C120/C200 Cameras
published Aug 18, 2026tp-link tapo c120 firmwarePoC
CVE-2026-15316<1%7.1
Unauthenticated Input Validation DoS in TP-Link Tapo C200 v5 Configuration Service
published Aug 18, 2026TP-Link Tapo C200 firmware

Appears with

WordPressproduct · 2
MegaCortexmalware · 1
Lockergogamalware · 1
StellarWPvendor · 1
TP-Linkvendor · 1
WooCommerce Wholesale Lead Captureproduct · 1
SAPvendor · 1
Stadler Railvictim · 1
Elementorvendor · 1
Raindroporganization · 1
S/4HANAproduct · 1
CISAvendor · 1
PhantomRaventhreat actor · 1
SecurityWeekvendor · 1
Elementororganization · 1
Automatticvendor · 1

Entities are extracted by the model from each article. First seen Sep 5, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.