49 organizations across 29 countries

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 22, 2026
Last mentionedSep 22, 2026

Timeline

1 articles · newest first

Hackers Exploit WordPress Flaws to Steal 18,566 Government Records and Plaintext Passwords

Chinese-speaking actor exploited WordPress flaws affecting 49 orgs, stealing 18,566 government records including plaintext passwords.

Cyber Security NewsSep 22, 09:51 UTC · Sep 22, 2026Exploit / PoCExploitedCVE-2026-63030 CVE-2026-601374 · 1 read

Related CVEs

by mentions

CVE-2026-6303011%9.8
WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE
published Jul 17, 2026WordPress CoreKEVPoC ×9
CVE-2026-601375%5.9
WordPress Core SQL Injection via WP_Query author__not_in (CVE-2026-60137)
published Jul 17, 2026WordPress CoreKEV

Appears with

western governmentvictim · 1
ZyXEL GS1900product · 1
ZyXELvendor · 1
GreyNoiseorganization · 1
WordPressproduct · 1
wp2shellmalware · 1

Entities are extracted by the model from each article. First seen Sep 22, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.