
Multiple XSS vulnerabilities patched in WordPress plugins October 2026
Sucuri publishes October 2026 roundup of medium and high-risk flaws in Elementor, LiteSpeed Cache, and WooCommerce.
3 stories, newest first · one card per story

Sucuri publishes October 2026 roundup of medium and high-risk flaws in Elementor, LiteSpeed Cache, and WooCommerce.

Sucuri's September 2026 roundup covers WordPress plugin patches including unauthenticated DoS in WooCommerce and arbitrary shortcode execution in WPForms.

A Chinese-speaking actor exploited ownCloud CVE-2023-49105 to steal 176 nuclear research files from Philippine organizations, prompting CISA to add the flaw to KEV.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views