Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#patchstack — news, CVEs and analysis · ZeroHour

today 43 visits · 56 views · 7 reads·all time 17K views

06:59 UTC· 6m ago

Tag

#patchstack

9 stories this week · 13 this month · 19 in 6 months · mostly security

stories per day · 30 days

Related#wordpress 12 #rce 7 #cve-2026-87902 5 #csrf 4 #elementor 3 #path-traversal 3 #exploitation 2 #givewp 2 #local-file-inclusion 2 #php-object-injection 2 #privilege-escalation 2 #account-takeover 1 #actively-exploited 1 #ai-generated-apps 1 #application-security 1 #click2shell 1 #compliance 1 #cra 1

13 stories, newest first · one card per story

Patchstack·21h ago high

Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites

#elementor #wordpress #csrf

3 sources 9 min

Cyber Security News·23h ago critical

Hackers Actively Exploiting WordPress Vulnerability to Execute Malicious Code

#wordpress #cve-2026-87902 #local-file-inclusion

16 sources in the wild 3 min5

BleepingComputer·1d ago high

WordPress Click2Shell flaw lets hackers execute PHP on the server

#wordpress #click2shell #csrf

6 sources 3 min

Patchstack·8d ago

Patchstack Now Protects Your AI-Built Apps

#ai-generated-apps #application-security #javascript

3 min1

Patchstack·15d ago

Launching managed CRA Article 14 reporting for open source maintainers

#compliance #cra #enisa

5 min

Security Affairs·26d ago high

Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers

#donation-plugin #givewp #patchstack

5 min1

Patchstack·29d ago

Unauthenticated PHP Object Injection to Remote Code Execution on GiveWP

#givewp #patchstack #php-object-injection

1

The Hacker News·Aug 25, 2026 high

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

#authentication-bypass #digitalocean #miniorange

in the wild 2 min

Patchstack·Aug 24, 2026

Case study: ManageWP Blocks 11.9M+ Threats in 6 Months with Patchstack

#case-study #managewp #patchstack

Patchstack·Aug 21, 2026 high

One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin

#authentication-bypass #digitalocean #miniorange

The Hacker News·Aug 20, 2026 high

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

#elementor-pro #file-upload #patchstack

3 min1

Patchstack·Aug 19, 2026 high

Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin

#elementor-pro #file-upload #patchstack

Patchstack·Aug 17, 2026

FlyWP Adds Proactive Vulnerability Protection with Patchstack

#flywp #hosting #patchstack

1