42
60
60
60
60
42
42
42
60
55
45
60
42
57
55
60
60
55
42
55
30
57
30
60
55
30
30
400,000 WordPress Sites Affected by Account Takeover Vulnerability in TranslatePress WordPress Plugin
Wordfence disclosed an unauthenticated account takeover flaw in the TranslatePress WordPress plugin, installed on over 400,000 sites, enabling full admin compromise.
On August 11, 2026, Wordfence received a submission for an unauthenticated account takeover vulnerability in TranslatePress, a WordPress plugin with more than 400,000 active installations. Unauthenticated attackers can obtain an administrator's password reset link, reset the account's password, and log in as that administrator. Full compromise of the affected site is possible without any authentication. Exploitation in the wild was not reported at disclosure.
73
Australia Alerts Organizations to Ongoing CMS Exploitation Attacks
60
57
47
60
42
47
30
60
42
60
60
42