Search: “plugin security”

603 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 605 Malware 464 Exploit / PoC 273 Ransomware 182 Threat actor 109 Data breach 103 Phishing & fraud 56 Policy & legal 49 Industry 44 AI safety & security 30 AI tools & infra 29 Tools 24 Research 11 Advisory 8

SeverityAll critical 795 high 622 medium 406 low 112 info 70

Flawed WordPress theme may allow admin account takeover on 22,000+ sites (CVE-2025-4322)

Help Net SecurityMay 21, 00:00 UTC · May 21, 2025Vulnerability CVE-2025-4322

60

Secure your CMS-based websites against pervasive attacks

Help Net SecurityAug 23, 07:16 UTC · Aug 23, 2022Vulnerability

30

XSS Vulnerabilities Found in WordPress Plugin Slider Revolution

Infosecurity MagazineMay 28, 16:30 UTC · May 28, 2024Vulnerability CVE-2024-34444 CVE-2024-34443

35

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)

Help Net SecurityAug 6, 06:54 UTC · Aug 6, 2026Vulnerability in the wildCVE-2026-63077

60

LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites

The Hacker NewsOct 31, 10:24 UTC · Oct 31, 2024Vulnerability CVE-2024-50550 CVE-2024-28000 CVE-2024-44000+3 CVEs

60

Critical auth bypass issues affect InfiniteWP Client and WP Time Capsule WordPress plugins

Security AffairsJan 16, 08:14 UTC · Jan 16, 2020Vulnerability

55

Denim Group integrates Jenkins Plugin with ThreadFix vulnerability management platform

Help Net SecurityAug 14, 00:00 UTC · Aug 14, 2019Vulnerability

30

WordPress Plugin Facebook Widget affected by Authenticated XSS

Security AffairsJul 29, 20:43 UTC · Jul 29, 2019Vulnerability

30

Rogue WordPress Plugin Exposes E

The Hacker NewsDec 26, 04:09 UTC · Dec 26, 2023Vulnerability

30

LiteSpeed Cache Plugin Vulnerability Poses Admin Access Risk

Infosecurity MagazineOct 30, 17:15 UTC · Oct 30, 2024Vulnerability CVE-2024-50550

60

Exploiting Vulnerabilities in WordPress plugins, a cybercrime trend

Security AffairsFeb 11, 12:04 UTC · Feb 11, 2015Vulnerability

55

GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk

The Hacker NewsAug 21, 04:35 UTC · Aug 21, 2024Vulnerability CVE-2024-5932 CVE-2024-6500 CVE-2024-7094+4 CVEs

60

Contrast Security partners with Secure Code Warrior to deliver security training for developers

Help Net SecurityDec 12, 13:28 UTC · Dec 12, 2023Vulnerability

30

Vulnerability in Chaty Pro Plugin Exposes 18,000 WordPress Sites

Infosecurity MagazineMar 6, 17:15 UTC · Mar 6, 2025Vulnerability CVE-2025-26776

35

UserPro Plugin Vulnerability Allows Account Takeover

Infosecurity MagazineMay 22, 16:30 UTC · May 22, 2024Vulnerability CVE-2024-35700

60

Over 100K+ WordPress sites using PageLayer plugin exposed to hack

Security AffairsMay 31, 08:20 UTC · May 31, 2020Vulnerability

42

More than 8,800 WordPress Plugins out of 44,705 are flawed

Security AffairsDec 16, 07:46 UTC · Dec 16, 2016Vulnerability

55

WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers

The Hacker NewsSep 12, 04:57 UTC · Sep 12, 2024Vulnerability

42

Tens of Jenkins plugins are affected by zero

Security AffairsJul 3, 21:15 UTC · Jul 3, 2022Vulnerability

30

Multiple Flaws Found in the Avada WordPress Theme and Plugin

Infosecurity MagazineAug 11, 17:30 UTC · Aug 11, 2023Vulnerability CVE-2023-39309 CVE-2023-39306 CVE-2023-39307+2 CVEs

47

Popular AMP Plugin for WordPress Patches Critical Flaw

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2018Vulnerability

55

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2024Vulnerability in the wild

60

Flaw Exposes WP Migration Plugin to Hacks

Infosecurity MagazineAug 30, 17:30 UTC · Aug 30, 2023Vulnerability

42

Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin Accounts

The Hacker NewsJul 4, 17:49 UTC · Jul 4, 2023Vulnerability in the wildCVE-2023-3460

60

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

The Hacker NewsJan 22, 01:32 UTC · Jan 22, 2024Vulnerability CVE-2023-6000

47

High Severity WordPress Plugin Bug Hits Three Million

Infosecurity MagazineFeb 18, 09:25 UTC · Feb 18, 2022Vulnerability CVE-2022-0633

47

New Research Highlights Vulnerabilities in MLOps Platforms

Infosecurity MagazineJan 7, 17:15 UTC · Jan 7, 2025Vulnerability

55

Surging CMS attacks keep SQL injections on the radar during the next normal

Help Net SecurityNov 14, 09:12 UTC · Nov 14, 2023Vulnerability

42

Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

The Hacker NewsAug 23, 04:12 UTC · Aug 23, 2024Vulnerability in the wildCVE-2024-28000 CVE-2023-40000

60

Vulnerability Spotlight: CVE-2018-3952 / CVE-2018-4010 - Multi-provider VPN Client Privilege Escalation Vulnerabilities

Cisco TalosSep 7, 12:44 UTC · Sep 7, 2018Vulnerability in the wildCVE-2018-3952 CVE-2018-4010 CVE-2018-10169

60

Fancy Product Designer Plugin Flaws Expose WordPress Sites

Infosecurity MagazineJan 9, 17:15 UTC · Jan 9, 2025Vulnerability CVE-2024-51919 CVE-2024-51818

60

Experts disclosed two flaws in JetBrains TeamCity On

Security AffairsMar 5, 08:19 UTC · Mar 5, 2024Vulnerability CVE-2024-27198 CVE-2024-27199 CVE-2024-23917

60

Critical WordPress plugin vulnerability under active exploit threatens thousands

Ars Technica · SecurityDec 12, 21:00 UTC · Dec 12, 2024Vulnerability in the wildCVE-2024-11972

60

Building security into cloud native apps with NGINX

Help Net SecurityFeb 19, 00:00 UTC · Feb 19, 2019Vulnerability1

30

High-Risk SQLi Flaw Exposes WordPress Memberships Plugin Users

Infosecurity MagazineSep 1, 16:00 UTC · Sep 1, 2025Vulnerability CVE-2025-49870

35

CVE-2019-12735 - opening a specially crafted file in Vim or Neovim Editor could compromise your Linux system

Security AffairsJun 10, 20:28 UTC · Jun 10, 2019Vulnerability CVE-2019-12735

47

Critical Flaw Uncovered in WordPress Backup Plugin Used by Over 3 Million Sites

The Hacker NewsFeb 19, 06:25 UTC · Feb 19, 2022Vulnerability CVE-2022-0633

60

Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension

The Hacker NewsApr 26, 11:37 UTC · Apr 26, 2019Vulnerability

55

Jenkins patched a critical RCE flaw in its open source automation server

Security AffairsOct 4, 15:37 UTC · Oct 4, 2025Vulnerability CVE-2017-1000353 CVE-2017-1000354 CVE-2017-1000355

60

Critical RCE Flaw Reported in Spotify's Backstage Software Catalog and Developer Platform

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2022Vulnerability CVE-2022-36067

60