Search: “plugins”

2,403 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 705 Malware 632 Exploit / PoC 309 Ransomware 203 Threat actor 141 Data breach 109 Phishing & fraud 64 Industry 62 Policy & legal 53 AI tools & infra 40 AI safety & security 34 Tools 29 Research 15 AI industry 14

SeverityAll critical 864 high 803 medium 519 low 152 info 92

Attackers Hijack Popular WordPress Plugins to Deploy Backdoors

Infosecurity MagazineJun 15, 17:00 UTC · Jun 15, 2026Malware

42

Attackers compromised Awesome Motive CDN files, backdooring WordPress sites running OptinMonster, TrustPulse, and PushEngage

Security AffairsJun 15, 08:52 UTC · Jun 15, 2026Malware

42

Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs

The Hacker NewsMay 6, 08:34 UTC · May 6, 2026Malware

30

Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites

Security AffairsMar 12, 13:25 UTC · Mar 12, 2026Vulnerability CVE-2026-2413

60

Critical Flaws in WordPress Plugin Leave 10,000 Sites Vulnerable

Infosecurity MagazineJul 28, 16:05 UTC · Jul 28, 2025Vulnerability CVE-2025-7340 CVE-2025-7341 CVE-2025-7360

60

Hackers Deploy Stealth Backdoor in WordPress Mu

The Hacker NewsJul 24, 05:11 UTC · Jul 24, 2025Malware

42

OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws

The Hacker NewsJul 18, 04:54 UTC · Jul 18, 2025Exploit / PoC in the wildCVE-2025-27007 CVE-2025-3102

60

Major WordPress Plugin Flaw Exploited in Under 4 Hours

Infosecurity MagazineApr 14, 16:00 UTC · Apr 14, 2025Vulnerability in the wild

60

A flaw in the W3 Total Cache plugin exposes hundreds of thousands of WordPress sites to attacks

Security AffairsJan 19, 19:20 UTC · Jan 19, 2025Vulnerability CVE-2024-12365

35

New EAGERBEE Variant Targets ISPs and Governments with Advanced Backdoor Capabilities

The Hacker NewsJan 7, 12:33 UTC · Jan 7, 2025Malware CVE-2021-26855

47

WordPress plugin Jetpack fixes nearly decade

The RecordOct 15, 14:11 UTC · Oct 15, 2024Exploit / PoC in the wild

60

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

The Hacker NewsOct 7, 06:13 UTC · Oct 7, 2024Vulnerability CVE-2024-47374 CVE-2024-44000 CVE-2024-43917+2 CVEs

60

WordPress LiteSpeed Cache plugin flaw could allow site takeover

Security AffairsOct 5, 13:49 UTC · Oct 5, 2024Vulnerability CVE-2024-47374 CVE-2024-44000

47

Litespeed Cache Plugin Flaw Allows XSS Attack, Update Now

Infosecurity MagazineOct 3, 17:30 UTC · Oct 3, 2024Vulnerability CVE-2024-47374

35

Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

The Hacker NewsAug 31, 15:15 UTC · Aug 31, 2024Vulnerability CVE-2024-6386

60

Unveiling SpiceRAT: SneakyChef's latest tool targeting EMEA and Asia

Cisco TalosJun 21, 12:00 UTC · Jun 21, 2024Malware

30

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

The Hacker NewsApr 27, 04:59 UTC · Apr 27, 2024Vulnerability CVE-2024-27956 CVE-2024-2876 CVE-2024-28890+2 CVEs1

60

A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites

Security AffairsApr 22, 06:58 UTC · Apr 22, 2024Vulnerability CVE-2024-28890 CVE-2024-31077 CVE-2024-31857

60

Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Malware CVE-2023-6000 CVE-2024-2123 CVE-2024-1071+1 CVEs

47

XSS flaw in LiteSpeed Cache plugin exposes millions of WordPress sites at risk

Security AffairsFeb 27, 15:29 UTC · Feb 27, 2024Vulnerability CVE-2023-40000

47

Flaw in AI Plugin Exposes 50,000 WordPress Sites to Remote Attack

Infosecurity MagazineJan 9, 16:45 UTC · Jan 9, 2024Vulnerability CVE-2023-51409

60

Researchers Uncover Malware Posing as WordPress Caching Plugin

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2023Malware

42

Critical flaw found in the WooCommerce Stripe Gateway Plugin

Security AffairsJun 14, 13:32 UTC · Jun 14, 2023Vulnerability CVE-2023-34000

60

Hackers are actively exploiting a flaw in Elementor Pro WordPress plugin

Security AffairsMar 31, 20:36 UTC · Mar 31, 2023Exploit / PoC in the wild

60

Experts warn of attacks exploiting WordPress gift card plugin

Security AffairsDec 25, 19:42 UTC · Dec 25, 2022Vulnerability CVE-2022-45359

60

Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2022Exploit / PoC in the wildCVE-2022-3180

60

Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes

The Hacker NewsJan 22, 07:39 UTC · Jan 22, 2022Malware CVE-2021-24867 CVE-2022-0218

47

A flaw in The Plus Addons for Elementor WordPress plugin allows sites takeover

Security AffairsMar 10, 09:20 UTC · Mar 10, 2021Exploit / PoC in the wild

60

Critical flaws in NextGen Gallery WordPress plugin still impact over 500K installs

Security AffairsFeb 9, 15:18 UTC · Feb 9, 2021Vulnerability CVE-2020-35942

60

Vulnerability Spotlight: Multiple vulnerabilities in Genivia gSOAP

Cisco TalosJan 5, 17:22 UTC · Jan 5, 2021Vulnerability in the wildCVE-2020-13574 CVE-2020-13575 CVE-2020-13576+2 CVEs

60

WordPress Easy WP SMTP zero-day potentially exposes hundreds of thousands of sites to hack

Security AffairsDec 12, 12:09 UTC · Dec 12, 2020Exploit / PoC

60

Flaws in WordPress Ultimate Member plugin expose 25K sites to hack

Security AffairsNov 10, 18:50 UTC · Nov 10, 2020Vulnerability

55

Vulnerabilities Affect 100,000 Sites Using WordPress Plugin

Infosecurity MagazineNov 10, 17:32 UTC · Nov 10, 2020Vulnerability

55

Dynamic Data Resolver

Cisco TalosOct 20, 15:12 UTC · Oct 20, 2020Tools1

30

Critical Bug in WordPress Theme Plugin Opens 200,000 Sites to Hackers

The Hacker NewsFeb 17, 22:09 UTC · Feb 17, 2020Vulnerability

55

Modular Plurox backdoor can spread over local network

Security AffairsJun 19, 07:02 UTC · Jun 19, 2019Malware

42

Serious flaw found and patched in WordPress, but it might lurk in plugins

CyberScoopFeb 19, 20:38 UTC · Feb 19, 2019Vulnerability in the wild

60

WordPress plugin patches flaw that gave hackers potential access to 40,000 websites

CyberScoopFeb 12, 14:32 UTC · Feb 12, 2019Vulnerability in the wild

60

Flaw in WordPress plugin allowed unauthorized admin access, backdoors

CyberScoopNov 12, 16:01 UTC · Nov 12, 2018Malware in the wild

60

Vulnerability Spotlight: Multiple Issues in Foxit PDF Reader

Cisco TalosOct 1, 16:59 UTC · Oct 1, 2018Vulnerability CVE-2018-3956 CVE-2018-3957 CVE-2018-3958+12 CVEs

35