Search: “Script Security plugin”

184 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 64 Vulnerability 55 Ransomware 33 Malware 28 Threat actor 25 Data breach 12 Phishing & fraud 3 Policy & legal 2 Advisory 2 AI safety & security 1

SeverityAll critical 184 high 38 medium 3 low 0 info 0

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

The Hacker NewsDec 12, 10:02 UTC · Dec 12, 2024Exploit / PoC CVE-2024-11972 CVE-2024-50498 CVE-2024-11205

60

Palo Alto Networks’ Koi acquisition is all about keeping AI agents in check

CyberScoopFeb 17, 16:55 UTC · Feb 17, 2026Exploit / PoC in the wild

60

Hackers Actively Exploiting Widely

The Hacker NewsApr 23, 19:23 UTC · Apr 23, 2019Exploit / PoC in the wildCVE-2019-9978

60

Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites

The Hacker NewsMay 8, 14:05 UTC · May 8, 2024Vulnerability in the wildCVE-2023-40000

60

WordPress Social Warfare plugin zero

Security AffairsMar 24, 11:01 UTC · Mar 24, 2019Exploit / PoC in the wild

60

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-30777 CVE-2023-30177 CVE-2023-31144+1 CVEs

60

Essential Addons for Elementor XSS Vulnerability Discovered

Infosecurity MagazineFeb 24, 17:00 UTC · Feb 24, 2025Vulnerability CVE-2025-24752

60

Flaws in Social Warfare plugin actively exploited in the wild

Security AffairsApr 25, 18:35 UTC · Apr 25, 2019Exploit / PoC in the wildCVE-2019-9978

60

Attackers exploit Funnel Builder bug to inject e-skimmers into e

Security AffairsMay 17, 12:25 UTC · May 17, 2026Vulnerability in the wild

60

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

The Hacker NewsMay 30, 13:49 UTC · May 30, 2024Vulnerability in the wildCVE-2023-6961 CVE-2023-40000 CVE-2024-2194

60

Drupal Releases Core CMS Updates to Patch Several Vulnerabilities

The Hacker NewsApr 17, 21:51 UTC · Apr 17, 2019Vulnerability in the wildCVE-2019-10909 CVE-2019-10910 CVE-2019-1091

60

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

The Hacker NewsMay 26, 05:19 UTC · May 26, 2026Exploit / PoC CVE-2026-5426

60

Over 800K WordPress sites are at risk due to a flaw in Ninja Forms plugin

Security AffairsMay 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild

60

Critical Security Flaw Found in Popular LayerSlider WordPress Plugin

The Hacker NewsApr 4, 04:21 UTC · Apr 4, 2024Vulnerability CVE-2024-2879 CVE-2024-1852 CVE-2024-1751+1 CVEs

60

New Case Study: The Evil Twin Checkout Page

The Hacker NewsOct 8, 10:58 UTC · Oct 8, 2024Data breach

60

LiteSpeed cPanel Plugin CVE-2026

The Hacker NewsMay 27, 09:52 UTC · May 27, 2026Ransomware in the wildCVE-2026-48172 CVE-2026-41940

60

Funnel Builder Flaw Exploited to Enable WooCommerce Checkout Skimming

The Hacker NewsJun 1, 11:32 UTC · Jun 1, 2026Exploit / PoC in the wild

60

600+ installs of WordPress Cookie Consent Plugin vulnerable. Fix it now!

Security AffairsFeb 13, 11:01 UTC · Feb 13, 2020Vulnerability CVE-2020-8417

60

Crooks are attempting to take over tens of thousands of WordPress sites

Security AffairsFeb 29, 16:15 UTC · Feb 29, 2020Exploit / PoC in the wild

60

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Critical flaws in NextGen Gallery WordPress plugin still impact over 500K installs

Security AffairsFeb 9, 15:18 UTC · Feb 9, 2021Vulnerability CVE-2020-35942

60

Zero-day in popular Yuzo Related Posts WordPress Plugin exploited in the wild

Security AffairsApr 12, 09:35 UTC · Apr 12, 2019Exploit / PoC in the wild

60

Researcher releases PoC code for critical Atlassian Crowd RCE flaw

Help Net SecurityAug 3, 11:37 UTC · Aug 3, 2020Exploit / PoC CVE-2019-11580

60

Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024

Help Net SecurityFeb 22, 00:00 UTC · Feb 22, 2026Exploit / PoC in the wildCVE-2026-2441 CVE-2026-22769 CVE-2026-2329+1 CVEs

60

APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor

The Hacker NewsAug 29, 04:31 UTC · Aug 29, 2024Malware CVE-2024-7262 CVE-2024-7263

60

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

The Hacker NewsJul 22, 03:57 UTC · Jul 22, 2023Exploit / PoC in the wildCVE-2023-3519 CVE-2023-3466 CVE-2023-3467+3 CVEs

60

Threat actors target WordPress sites using vulnerable File Manager installs

Security AffairsSep 11, 21:01 UTC · Sep 11, 2020Threat actor

60

Magecart group compromises customer ratings tool, affecting 'hundreds' of online stores

CyberScoopOct 9, 13:36 UTC · Oct 9, 2018Data breach in the wild

60

Using a WordPress flaw to leverage zerologon vulnerability and attack companies’ Domain Controllers

Security AffairsOct 7, 06:03 UTC · Oct 7, 2020Vulnerability in the wildCVE-2020-25213 CVE-2020-1472

60

CVE-2026-8732: The WP Maps Pro Flaw That Lets Anyone Create a WordPress Admin Without a Password

Security AffairsJun 1, 11:36 UTC · Jun 1, 2026Vulnerability in the wildCVE-2026-8732

60

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

The Hacker NewsOct 7, 06:13 UTC · Oct 7, 2024Vulnerability CVE-2024-47374 CVE-2024-44000 CVE-2024-43917+2 CVEs

60

SAP June 2025 Security Patch Day fixed critical NetWeaver bug

Security AffairsJun 10, 17:31 UTC · Jun 10, 2025Vulnerability CVE-2025-42989 CVE-2025-42982 CVE-2025-42983+3 CVEs

60

Flaw in Claude’s Chrome extension allowed ‘any’ other plugin to hijack victims’ AI

CyberScoopMay 8, 13:14 UTC · May 8, 2026Exploit / PoC in the wild

60

Palo Alto Networks Discovers Two Adobe Reader Privileged JavaScript Zero

Palo Alto Unit 42Jul 3, 01:11 UTC · Jul 3, 2020Exploit / PoC CVE-2016-6957 CVE-2016-6958

60

Microsoft Security Updates January 2016

Kaspersky SecurelistJan 12, 19:08 UTC · Jan 12, 2016Vulnerability in the wildCVE-2016-0034

60

Flawed WordPress theme may allow admin account takeover on 22,000+ sites (CVE-2025-4322)

Help Net SecurityMay 21, 00:00 UTC · May 21, 2025Vulnerability CVE-2025-4322

60

Broadcom Patches VMware Aria Flaws

The Hacker NewsJan 31, 05:49 UTC · Jan 31, 2025Vulnerability in the wildCVE-2025-22218 CVE-2025-22219 CVE-2025-22220+5 CVEs

60

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

The Hacker NewsApr 1, 05:37 UTC · Apr 1, 2025Data breach CVE-2024-27956 CVE-2024-8353 CVE-2024-4345

60

Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances

The Hacker NewsMay 27, 07:08 UTC · May 27, 2023Exploit / PoC in the wildCVE-2023-2868

60

A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites

Security AffairsApr 22, 06:58 UTC · Apr 22, 2024Vulnerability CVE-2024-28890 CVE-2024-31077 CVE-2024-31857

60