Search: “Wordfence”

43 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 107 Exploit / PoC 53 Malware 22 Threat actor 9 Phishing & fraud 7 Tools 6 Ransomware 4 Data breach 4 Advisory 2 Policy & legal 2 Industry 1

SeverityAll critical 119 high 65 medium 19 low 7 info 7

100K+ WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hack

Security AffairsApr 3, 08:50 UTC · Apr 3, 2020Exploit / PoC in the wild

60

Critical flaw in WooCommerce Payments plugin allows site takeover

Security AffairsMar 24, 14:45 UTC · Mar 24, 2023Exploit / PoC in the wild

60

0day in Fancy Product Designer WordPress plugin actively exploited

Security AffairsJun 2, 18:21 UTC · Jun 2, 2021Exploit / PoC in the wildCVE-2021-24370

60

A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privileges

Security AffairsMar 31, 21:43 UTC · Mar 31, 2020Exploit / PoC in the wild

60

Zero-Day flaws in 3 WordPress Plugins being exploited in the wild

Security AffairsOct 3, 14:05 UTC · Oct 3, 2017Exploit / PoC in the wild

60

Hackers‌ ‌Actively‌ ‌Exploiting‌ ‌0-Day‌ ‌in WordPress Plugin Installed on Over ‌17,000‌ ‌Sites

The Hacker NewsJun 3, 05:51 UTC · Jun 3, 2021Exploit / PoC in the wild

60

WordPress Sites Attacked in Their Millions

Infosecurity MagazineSep 7, 10:35 UTC · Sep 7, 2020Exploit / PoC

60

Issues in Elementor Pro and Ultimate Addons for Elementor exposed 1 Million WordPress sites at risk

Security AffairsMay 7, 22:58 UTC · May 7, 2020Exploit / PoC in the wild

60

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

100k+ WordPress sites exposed to hack due to a bug in Real

Security AffairsApr 28, 09:03 UTC · Apr 28, 2020Exploit / PoC in the wild

60

Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks

The Hacker NewsDec 8, 09:15 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-6389 CVE-2025-2611 CVE-2025-1610

60

Attackers actively exploit critical zero

Security AffairsJul 31, 16:11 UTC · Jul 31, 2025Exploit / PoC CVE-2025-5394

60

Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2022Exploit / PoC in the wildCVE-2022-3180

60

Experts warn of attacks exploiting zero

Security AffairsSep 9, 11:50 UTC · Sep 9, 2022Exploit / PoC in the wildCVE-2022-31474

60

A flaw in The Plus Addons for Elementor WordPress plugin allows sites takeover

Security AffairsMar 10, 09:20 UTC · Mar 10, 2021Exploit / PoC in the wild

60

Critical flaws in Orbit Fox WordPress plugin allows site takeover

Security AffairsJan 17, 13:46 UTC · Jan 17, 2021Exploit / PoC

60

A critical flaw in wpDiscuz Wordpress plugin lets hackers take over hosting account

Security AffairsAug 2, 08:35 UTC · Aug 2, 2020Exploit / PoC

60

Zero-day in popular Yuzo Related Posts WordPress Plugin exploited in the wild

Security AffairsApr 12, 09:35 UTC · Apr 12, 2019Exploit / PoC in the wild

60

A critical flaw in WordPress GDPR compliance plugin exploited in the wild

Security AffairsNov 12, 10:08 UTC · Nov 12, 2018Exploit / PoC in the wild

60

OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws

The Hacker NewsJul 18, 04:54 UTC · Jul 18, 2025Exploit / PoC in the wildCVE-2025-27007 CVE-2025-3102

60

Yellow Pencil WordPress Plugin flaw expose tens of thousands of sites

Security AffairsAug 28, 11:49 UTC · Aug 28, 2023Exploit / PoC

60

Researchers release PoC for Fortinet firewall flaw, exploitation attempts mount

Help Net SecurityOct 14, 00:00 UTC · Oct 14, 2022Exploit / PoC in the wildCVE-2022-40684

60

Hackers Exploit Zero-Day in WordPress BackupBuddy Plugin in ~5 Million Attempts

The Hacker NewsSep 10, 09:32 UTC · Sep 10, 2022Exploit / PoC in the wildCVE-2022-31474

60

Flaws in Popup Builder WordPress plugin expose 100K+ websites to hack

Security AffairsMar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196 CVE-2020-10195

60

Crooks are attempting to take over tens of thousands of WordPress sites

Security AffairsFeb 29, 16:15 UTC · Feb 29, 2020Exploit / PoC in the wild

60

Hackers are actively exploiting a Zero

Security AffairsFeb 20, 06:31 UTC · Feb 20, 2020Exploit / PoC in the wild

60

WordPress Social Warfare plugin zero

Security AffairsMar 24, 11:01 UTC · Mar 24, 2019Exploit / PoC in the wild

60

Hackers compromise WordPress sites via Zero

Security AffairsJan 28, 15:26 UTC · Jan 28, 2019Exploit / PoC in the wildCVE-2019-6703

60

WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts

The Hacker NewsDec 3, 17:09 UTC · Dec 3, 2025Exploit / PoC in the wildCVE-2025-8489

60

Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install

The Hacker NewsJul 31, 06:53 UTC · Jul 31, 2025Exploit / PoC CVE-2025-5394

60

Critical flaw in WPML WordPress plugin impacts 1M websites

Security AffairsAug 27, 21:38 UTC · Aug 27, 2024Exploit / PoC CVE-2024-6386

60

Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites

The Hacker NewsJul 19, 03:25 UTC · Jul 19, 2023Exploit / PoC in the wildCVE-2023-28121 CVE-2023-29298 CVE-2023-38203

60

WordPress sites using the Ultimate Member plugin are under attack

Security AffairsJul 2, 06:36 UTC · Jul 2, 2023Exploit / PoC CVE-2023-3460

60

Critical flaw in Ninja Forms WordPress Plugin actively exploited in the wild

Security AffairsJun 19, 22:31 UTC · Jun 19, 2022Exploit / PoC in the wild

60

Critical Zero-Day in WordPress Plugin Under Active Attack

Infosecurity MagazineJun 2, 11:06 UTC · Jun 2, 2021Exploit / PoC in the wild

60

Recent WordPress flaw exploited to deface more than 1.5 million web sites

Security AffairsFeb 11, 09:11 UTC · Feb 11, 2017Exploit / PoC

60

Attackers Actively Exploiting Critical Vulnerability in Elementor Pro Plugin

Attackers actively exploit a critical unauthenticated file upload flaw in Elementor Pro (6M+ installs), enabling remote code execution and site takeover.

Wordfence reports that attackers are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in Elementor Pro, which it disclosed on August 19, 2026. The WordPress plugin has more than 6,000,000 active installations. Unauthenticated attackers can upload arbitrary files, including executable PHP files, leading to remote code execution and complete site takeover.

WordfenceSep 2, 15:07 UTC · 14d agoExploit / PoC in the wild

85

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

The Hacker NewsJul 22, 15:38 UTC · Jul 22, 2026Exploit / PoC in the wildCVE-2026-29059 CVE-2026-60137 CVE-2026-63030+2 CVEs

60

CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

The Hacker NewsNov 5, 06:12 UTC · Nov 5, 2025Exploit / PoC in the wildCVE-2025-11371 CVE-2025-48703 CVE-2025-11533+2 CVEs

60

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

The Hacker NewsDec 12, 10:02 UTC · Dec 12, 2024Exploit / PoC CVE-2024-11972 CVE-2024-50498 CVE-2024-11205

60