Search: “wordpress”

1,740 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 457 Malware 327 Industry 194 Exploit / PoC 173 Ransomware 135 Threat actor 105 Phishing & fraud 99 Policy & legal 99 Research 66 Data breach 62 AI safety & security 11 Tools 8 Advisory 7 AI tools & infra 5

SeverityAll critical 511 high 456 medium 356 low 402 info 26

New PHP Code Execution Attack Puts WordPress Sites at Risk

The Hacker NewsAug 22, 16:51 UTC · Aug 22, 2018Vulnerability

55

Flaws in Multidots WordPress Plugins expose e-Commerce websites to a broad range of attacks

Security AffairsJun 2, 14:20 UTC · Jun 2, 2018Exploit / PoC CVE-2018-11579 CVE-2018-11580 CVE-2018-11633+1 CVEs

50

Hidden Backdoor Found In WordPress Captcha Plugin Affects Over 300,000 Sites

The Hacker NewsDec 20, 09:56 UTC · Dec 20, 2017Malware

42

SQL Injection flaw in WordPress Plugin WP Statistics

Security AffairsJul 1, 12:19 UTC · Jul 1, 2017Vulnerability

30

Tens of thousands of compromised routers abused in WordPress attacks

Security AffairsMay 3, 11:13 UTC · May 3, 2017Vulnerability CVE-2014-9222

60

WordPress 4.7.3 is out to fix 6 security issues, but CSRF flaw remains unpatched

Security AffairsMar 7, 16:25 UTC · Mar 7, 2017Vulnerability

30

Crooks exploit 0day in WordPress eCommerce plugin to upload a backdoor

Security AffairsOct 18, 10:35 UTC · Oct 18, 2016Malware

55

WordPress 7.0.4 Release

WordPress releases 7.0.4 with a security fix and urges all sites to update immediately.

WordPress.org announced the availability of WordPress 7.0.4, a maintenance release containing a security fix. Because it is a security release, the project recommends updating sites immediately via the dashboard or a download from WordPress.org. The announcement gives no technical details about the flaw being patched.

WordPress.org · SecurityAug 12, 14:45 UTC · Aug 12, 2026Advisory

55

Avada Builder Flaws Expose One Million WordPress Sites

Infosecurity MagazineMay 13, 14:00 UTC · May 13, 2026Vulnerability CVE-2026-4782 CVE-2026-4798

35

King Addons flaw lets anyone become WordPress admin

Security AffairsDec 3, 22:28 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-8489

60

Critical WordPress Plugin Bugs Exploited En Masse

Infosecurity MagazineOct 27, 10:15 UTC · Oct 27, 2025Vulnerability in the wildCVE-2024-9234 CVE-2024-9707 CVE-2024-11972

60

WordPress Plugin Flaw Exposes 600,000 Sites to File Deletion

Infosecurity MagazineJul 3, 16:45 UTC · Jul 3, 2025Vulnerability CVE-2025-6463

60

OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2025Vulnerability in the wildCVE-2025-3102

60

Major WordPress Plugin Flaw Exploited in Under 4 Hours

Infosecurity MagazineApr 14, 16:00 UTC · Apr 14, 2025Vulnerability in the wild

60

Vulnerability in Chaty Pro Plugin Exposes 18,000 WordPress Sites

Infosecurity MagazineMar 6, 17:15 UTC · Mar 6, 2025Vulnerability CVE-2025-26776

35

WordPress ASE Plugin Vulnerability Threatens Site Security

Infosecurity MagazineFeb 6, 16:30 UTC · Feb 6, 2025Vulnerability CVE-2025-24648 CVE-2024-43333

35

WordPress Jetpack plugin critical flaw impacts 27 million sites

Security AffairsOct 15, 09:43 UTC · Oct 15, 2024Exploit / PoC in the wild

60

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

The Hacker NewsOct 7, 06:13 UTC · Oct 7, 2024Vulnerability CVE-2024-47374 CVE-2024-44000 CVE-2024-43917+2 CVEs

60

Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

The Hacker NewsAug 31, 15:15 UTC · Aug 31, 2024Vulnerability CVE-2024-6386

60

Critical flaw in WPML WordPress plugin impacts 1M websites

Security AffairsAug 27, 21:38 UTC · Aug 27, 2024Exploit / PoC CVE-2024-6386

60

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

The Hacker NewsMay 30, 13:49 UTC · May 30, 2024Vulnerability in the wildCVE-2023-6961 CVE-2023-40000 CVE-2024-2194

60

A flaw in the Forminator plugin impacts hundreds of thousands of WordPress sites

Security AffairsApr 22, 06:58 UTC · Apr 22, 2024Vulnerability CVE-2024-28890 CVE-2024-31077 CVE-2024-31857

60

XSS flaw in WordPress WP-Members Plugin can lead to script injection

Security AffairsApr 2, 18:59 UTC · Apr 2, 2024Vulnerability

30

Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Malware CVE-2023-6000 CVE-2024-2123 CVE-2024-1071+1 CVEs

47

Four Million WordPress Sites Vulnerable to LiteSpeed Plugin Flaw

Infosecurity MagazineFeb 27, 16:30 UTC · Feb 27, 2024Vulnerability CVE-2023-40000

35

XSS flaw in LiteSpeed Cache plugin exposes millions of WordPress sites at risk

Security AffairsFeb 27, 15:29 UTC · Feb 27, 2024Vulnerability CVE-2023-40000

47

WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites

The Hacker NewsFeb 20, 09:08 UTC · Feb 20, 2024Exploit / PoC in the wildCVE-2024-25600

60

Multiple Flaws Found in the Avada WordPress Theme and Plugin

Infosecurity MagazineAug 11, 17:30 UTC · Aug 11, 2023Vulnerability CVE-2023-39309 CVE-2023-39306 CVE-2023-39307+2 CVEs

47

Three flaws in Ninja Forms plugin for WordPress impact 900K sites

Security AffairsJul 31, 09:08 UTC · Jul 31, 2023Vulnerability CVE-2023-37979 CVE-2023-38386 CVE-2023-38393

35

Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

The Hacker NewsJun 1, 04:02 UTC · Jun 1, 2023Exploit / PoC in the wildCVE-2023-28782

60

WordPress Rushes Out Jetpack Patch to Millions

Infosecurity MagazineMay 31, 10:00 UTC · May 31, 2023Vulnerability in the wild

60

New Flaw in WordPress Plugin Used by Over a Million Sites Under Active Exploitation

The Hacker NewsMay 20, 04:02 UTC · May 20, 2023Exploit / PoC in the wildCVE-2023-32243

60

Over 4,500 WordPress Sites Hacked to Redirect Visitors to Sketchy Ad Pages

The Hacker NewsJan 28, 05:30 UTC · Jan 28, 2023Malware

30

Massive Black hat SEO campaign used +15K WordPress sites

Security AffairsNov 14, 15:53 UTC · Nov 14, 2022Threat actor

45

CloudLinux AccelerateWP enables website owners to optimize their WordPress sites

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2022AI tools & infra

30

UpdraftPlus WordPress plugin update forced for 3 million sites

Security AffairsFeb 19, 09:55 UTC · Feb 19, 2022Vulnerability CVE-2022-0633

47

Critical Flaw Uncovered in WordPress Backup Plugin Used by Over 3 Million Sites

The Hacker NewsFeb 19, 06:25 UTC · Feb 19, 2022Vulnerability CVE-2022-0633

60

High Severity WordPress Plugin Bug Hits Three Million

Infosecurity MagazineFeb 18, 09:25 UTC · Feb 18, 2022Vulnerability CVE-2022-0633

47

RCE in WordPress plugin Essential Addons for Elementor impacts hundreds of thousands of websites

Security AffairsFeb 1, 05:35 UTC · Feb 1, 2022Vulnerability

55

High-Severity flaw in 3 WordPress plugins impacts 84,000 websites

Security AffairsJan 17, 13:21 UTC · Jan 17, 2022Vulnerability CVE-2022-0215

47