Essential Addons Plugin Flaw Exposes One Million WordPress WebsitesInfosecurity Magazine·May 12, 16:30 UTC · May 12, 2023VulnerabilityCVE-2023-3224360
LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress WebsitesThe Hacker News·Oct 31, 10:24 UTC · Oct 31, 2024VulnerabilityCVE-2024-50550CVE-2024-28000CVE-2024-44000+3 CVEs60
Simple Membership Plugin Flaws Expose WordPress SitesInfosecurity Magazine·Sep 27, 17:30 UTC · Sep 27, 2023VulnerabilityCVE-2023-41957CVE-2023-4195660
UserPro Plugin Vulnerability Allows Account TakeoverInfosecurity Magazine·May 22, 16:30 UTC · May 22, 2024VulnerabilityCVE-2024-3570060
SQL Injection Flaw Affects 40,000 WordPress SitesInfosecurity Magazine·Feb 3, 16:15 UTC · Feb 3, 2026Vulnerability in the wildCVE-2025-6798760
Motors WordPress Vulnerability Exposes Sites to TakeoverInfosecurity Magazine·Dec 17, 16:45 UTC · Dec 17, 2025VulnerabilityCVE-2025-6437460
LiteSpeed Cache Plugin Vulnerability Poses Admin Access RiskInfosecurity Magazine·Oct 30, 17:15 UTC · Oct 30, 2024VulnerabilityCVE-2024-5055060
WP Time Capsule Plugin Update Urged After Critical Security FlawInfosecurity Magazine·Jul 15, 16:30 UTC · Jul 15, 2024Vulnerability55
RCE in WordPress plugin Essential Addons for Elementor impacts hundreds of thousands of websitesSecurity Affairs·Feb 1, 05:35 UTC · Feb 1, 2022Vulnerability55
Actively exploited critical flaw in Modular DS WordPress plugin enables admin takeoverSecurity Affairs·Jan 16, 08:26 UTC · Jan 16, 2026Vulnerability in the wildCVE-2026-2355060
Critical Flaws Found in Elementor King Addons Affect 10,000 SitesInfosecurity Magazine·Oct 30, 16:45 UTC · Oct 30, 2025VulnerabilityCVE-2025-6327CVE-2025-632560
PayU Plugin Flaw Allows Account Takeover on 5000 WordPress SitesInfosecurity Magazine·Jun 9, 16:45 UTC · Jun 9, 2025VulnerabilityCVE-2025-3102260
Attackers are exploiting recently disclosed OttoKit WordPress plugin flawSecurity Affairs·Apr 12, 10:44 UTC · Apr 12, 2025Vulnerability in the wildCVE-2025-310260
Essential Addons for Elementor XSS Vulnerability DiscoveredInfosecurity Magazine·Feb 24, 17:00 UTC · Feb 24, 2025VulnerabilityCVE-2025-2475260
Fancy Product Designer Plugin Flaws Expose WordPress SitesInfosecurity Magazine·Jan 9, 17:15 UTC · Jan 9, 2025VulnerabilityCVE-2024-51919CVE-2024-5181860
Security Flaws in WordPress Woffice Theme Prompts Urgent UpdateInfosecurity Magazine·Dec 12, 17:15 UTC · Dec 12, 2024Vulnerability55
WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS AttacksThe Hacker News·Oct 7, 06:13 UTC · Oct 7, 2024VulnerabilityCVE-2024-47374CVE-2024-44000CVE-2024-43917+2 CVEs60
A flaw in WordPress LiteSpeed Cache Plugin allows account takeoverSecurity Affairs·Sep 7, 11:13 UTC · Sep 7, 2024VulnerabilityCVE-2024-4400060
Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress SitesThe Hacker News·Apr 27, 04:59 UTC · Apr 27, 2024VulnerabilityCVE-2024-27956CVE-2024-2876CVE-2024-28890+2 CVEs160
Flaw in AI Plugin Exposes 50,000 WordPress Sites to Remote AttackInfosecurity Magazine·Jan 9, 16:45 UTC · Jan 9, 2024VulnerabilityCVE-2023-5140960
WordPress Releases Update 6.4.2 to Address Critical Remote Attack VulnerabilityThe Hacker News·Dec 8, 09:23 UTC · Dec 8, 2023Vulnerability55
Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites VulnerableThe Hacker News·Jul 31, 06:42 UTC · Jul 31, 2023VulnerabilityCVE-2023-37979CVE-2023-38386CVE-2023-38393+2 CVEs60
Critical flaw found in the WooCommerce Stripe Gateway PluginSecurity Affairs·Jun 14, 13:32 UTC · Jun 14, 2023VulnerabilityCVE-2023-3400060
New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to CyberattacksThe Hacker News·May 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-30777CVE-2023-30177CVE-2023-31144+1 CVEs60
Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!The Hacker News·Apr 1, 08:10 UTC · Apr 1, 2023Vulnerability55
WP Reset PRO WordPress plugin flaw allows to wipe the installation DBSecurity Affairs·Nov 10, 21:20 UTC · Nov 10, 2021Vulnerability55
RealHomes CRM Plugin Flaw Affected 30,000 WordPress SitesInfosecurity Magazine·Jan 22, 15:10 UTC · Jan 22, 2026VulnerabilityCVE-2025-6796860
Critical WordPress Post SMTP plugin flaw exposes 200K+ sites to full takeoverSecurity Affairs·Jul 28, 13:14 UTC · Jul 28, 2025VulnerabilityCVE-2025-2400060
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist PluginThe Hacker News·May 29, 08:52 UTC · May 29, 2025VulnerabilityCVE-2025-4757760
RCE Vulnerability Found in RomethemeKit For Elementor PluginInfosecurity Magazine·May 19, 16:00 UTC · May 19, 2025VulnerabilityCVE-2025-3091160
WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site BackdoorsThe Hacker News·Apr 28, 08:06 UTC · Apr 28, 2025Vulnerability55
Critical Vulnerabilities Found in WordPress Plugins WPLMS and VibeBPInfosecurity Magazine·Dec 23, 17:15 UTC · Dec 23, 2024VulnerabilityCVE-2024-56046CVE-2024-56043CVE-2024-5604260
Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPressThe Hacker News·Sep 6, 06:35 UTC · Sep 6, 2024VulnerabilityCVE-2024-44000CVE-2024-2800060
Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code ExecutionThe Hacker News·Aug 31, 15:15 UTC · Aug 31, 2024VulnerabilityCVE-2024-638660
Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin AccessThe Hacker News·Aug 23, 04:12 UTC · Aug 23, 2024Vulnerability in the wildCVE-2024-28000CVE-2023-4000060
Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress SitesThe Hacker News·May 8, 14:05 UTC · May 8, 2024Vulnerability in the wildCVE-2023-4000060
Critical Security Flaw in Social Login Plugin for WordPress Exposes Users' AccountsThe Hacker News·Jun 29, 07:24 UTC · Jun 29, 2023VulnerabilityCVE-2023-2982CVE-2023-3105CVE-2023-3296060
Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway PluginThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023VulnerabilityCVE-2023-3400060
Critical RCE Flaw Reported in WordPress Elementor Website Builder PluginThe Hacker News·Apr 18, 05:47 UTC · Apr 18, 2022Vulnerability55
Critical Bug Found in WordPress Plugin for Elementor with Over a Million InstallationsThe Hacker News·Feb 2, 05:24 UTC · Feb 2, 2022Vulnerability55