60
60
400,000 WordPress Sites Affected by Account Takeover Vulnerability in TranslatePress WordPress Plugin
Wordfence disclosed an unauthenticated account takeover flaw in the TranslatePress WordPress plugin, installed on over 400,000 sites, enabling full admin compromise.
On August 11, 2026, Wordfence received a submission for an unauthenticated account takeover vulnerability in TranslatePress, a WordPress plugin with more than 400,000 active installations. Unauthenticated attackers can obtain an administrator's password reset link, reset the account's password, and log in as that administrator. Full compromise of the affected site is possible without any authentication. Exploitation in the wild was not reported at disclosure.
73
60
60
60
60
60
60
60
60
60
60
60
60
Critical GitLab flaw allows account takeover without user interaction, patch quickly! (CVE-2023-7028)
60
Week in review: GitLab account takeover flaw, attackers exploiting Ivanti Connect Secure zero-days
60
60
60
60
60
60
60
60
60
60
Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No Warning
60
60
60
60
60
60
60
60
60
60
60
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
60
60
60