Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flawsSecurity Affairs·Oct 27, 08:40 UTC · Oct 27, 2025VulnerabilityCVE-2024-9234CVE-2024-9707CVE-2024-1197260
Everest Forms Pro WordPress Flaw is Handing Attackers Admin AccessSecurity Affairs·Jun 8, 14:11 UTC · Jun 8, 2026Vulnerability in the wildCVE-2026-330060
Flaw in WordPress plugin allowed unauthorized admin access, backdoorsCyberScoop·Nov 12, 16:01 UTC · Nov 12, 2018Malware in the wild60
Tens of thousands of compromised routers abused in WordPress attacksSecurity Affairs·May 3, 11:13 UTC · May 3, 2017VulnerabilityCVE-2014-922260
Threat actors target WordPress sites using vulnerable File Manager installsSecurity Affairs·Sep 11, 21:01 UTC · Sep 11, 2020Threat actor60
100K+ WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hackSecurity Affairs·Apr 3, 08:50 UTC · Apr 3, 2020Exploit / PoC in the wild60
King Addons flaw lets anyone become WordPress adminSecurity Affairs·Dec 3, 22:28 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-848960
Critical flaw in WooCommerce Payments plugin allows site takeoverSecurity Affairs·Mar 24, 14:45 UTC · Mar 24, 2023Exploit / PoC in the wild60
0day in Fancy Product Designer WordPress plugin actively exploitedSecurity Affairs·Jun 2, 18:21 UTC · Jun 2, 2021Exploit / PoC in the wildCVE-2021-2437060
A critical flaw in Rank Math WordPress plugin allows hackers to give users Admins privilegesSecurity Affairs·Mar 31, 21:43 UTC · Mar 31, 2020Exploit / PoC in the wild60
Zero-Day flaws in 3 WordPress Plugins being exploited in the wildSecurity Affairs·Oct 3, 14:05 UTC · Oct 3, 2017Exploit / PoC in the wild60
Over 400,000 sites at risk as hackers exploit Breeze Cache plugin flaw (CVE-2026Security Affairs·Apr 25, 14:22 UTC · Apr 25, 2026Vulnerability in the wildCVE-2026-384460
Critical Flaws in WordPress Plugin Leave 10,000 Sites VulnerableInfosecurity Magazine·Jul 28, 16:05 UTC · Jul 28, 2025VulnerabilityCVE-2025-7340CVE-2025-7341CVE-2025-736060
WooCommerce Patches Critical Plugin Flaw Affecting Half a Million SitesInfosecurity Magazine·Mar 24, 17:00 UTC · Mar 24, 2023Vulnerability in the wild60
Hackers Actively Exploiting 0-Day in WordPress Plugin Installed on Over 17,000 SitesThe Hacker News·Jun 3, 05:51 UTC · Jun 3, 2021Exploit / PoC in the wild60
Critical flaws in NextGen Gallery WordPress plugin still impact over 500K installsSecurity Affairs·Feb 9, 15:18 UTC · Feb 9, 2021VulnerabilityCVE-2020-3594260
Using a WordPress flaw to leverage zerologon vulnerability and attack companies’ Domain ControllersSecurity Affairs·Oct 7, 06:03 UTC · Oct 7, 2020Vulnerability in the wildCVE-2020-25213CVE-2020-147260
WordPress Sites Attacked in Their MillionsInfosecurity Magazine·Sep 7, 10:35 UTC · Sep 7, 2020Exploit / PoC60
Hackers are actively exploiting critical RCE in WordPress sites using File Manager pluginSecurity Affairs·Sep 2, 14:58 UTC · Sep 2, 2020Vulnerability55
Large-scale campaign targets configuration files from WordPress sitesSecurity Affairs·Jun 4, 11:15 UTC · Jun 4, 2020Threat actor in the wild60
Issues in Elementor Pro and Ultimate Addons for Elementor exposed 1 Million WordPress sites at riskSecurity Affairs·May 7, 22:58 UTC · May 7, 2020Exploit / PoC in the wild60
Over 800K WordPress sites are at risk due to a flaw in Ninja Forms pluginSecurity Affairs·May 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild60
100k+ WordPress sites exposed to hack due to a bug in RealSecurity Affairs·Apr 28, 09:03 UTC · Apr 28, 2020Exploit / PoC in the wild60
Hacking campaign targets sites running Duplicator WordPress pluginSecurity Affairs·Feb 25, 09:13 UTC · Feb 25, 2020Threat actor in the wild60
600+ installs of WordPress Cookie Consent Plugin vulnerable. Fix it now!Security Affairs·Feb 13, 11:01 UTC · Feb 13, 2020VulnerabilityCVE-2020-841760
Flaw in Ad Inserter WordPress plugin allows attackers to execute codeSecurity Affairs·Jul 15, 20:30 UTC · Jul 15, 2019Vulnerability55
Everest Forms Pro Vulnerability Allows Remote Code ExecutionInfosecurity Magazine·Jun 4, 16:15 UTC · Jun 4, 2026Vulnerability in the wildCVE-2026-330060
Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet AttacksThe Hacker News·Dec 8, 09:15 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-6389CVE-2025-2611CVE-2025-161060
CVE-2025-5947: WordPress Plugin flaw lets hackers access Admin accountsSecurity Affairs·Oct 9, 14:27 UTC · Oct 9, 2025VulnerabilityCVE-2025-594760
Attackers actively exploit critical zeroSecurity Affairs·Jul 31, 16:11 UTC · Jul 31, 2025Exploit / PoCCVE-2025-539460
WP Ultimate CSV Importer Flaws Expose 20,000 Websites to AttacksInfosecurity Magazine·Apr 1, 16:30 UTC · Apr 1, 2025VulnerabilityCVE-2025-2008CVE-2025-200760
Remove WordPress miniOrange plugins, a critical flaw can allow site takeoverSecurity Affairs·Mar 18, 12:48 UTC · Mar 18, 2024VulnerabilityCVE-2024-217260
miniOrange’s WordPress Social Login and Register plugin affected by a critical auth bypassSecurity Affairs·Jun 30, 04:03 UTC · Jun 30, 2023VulnerabilityCVE-2023-298260
Experts warn of attacks exploiting WordPress gift card pluginSecurity Affairs·Dec 25, 19:42 UTC · Dec 25, 2022VulnerabilityCVE-2022-4535960
Over 280,000 WordPress Sites Attacked Using WPGateway Plugin ZeroThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2022Exploit / PoC in the wildCVE-2022-318060
Threat actors are actively exploiting a zeroSecurity Affairs·Sep 14, 05:21 UTC · Sep 14, 2022Threat actor in the wildCVE-2022-318060
Vulnerability in WordPress BackupBuddy Plugin Exploited By HackersInfosecurity Magazine·Sep 11, 13:30 UTC · Sep 11, 2022Vulnerability in the wild60
Experts warn of attacks exploiting zeroSecurity Affairs·Sep 9, 11:50 UTC · Sep 9, 2022Exploit / PoC in the wildCVE-2022-3147460
A flaw in The Plus Addons for Elementor WordPress plugin allows sites takeoverSecurity Affairs·Mar 10, 09:20 UTC · Mar 10, 2021Exploit / PoC in the wild60
Critical flaws in Orbit Fox WordPress plugin allows site takeoverSecurity Affairs·Jan 17, 13:46 UTC · Jan 17, 2021Exploit / PoC60