Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites
3 sources 9 min
llm-typesafe 0.1a0
llm-keys-ui 0.1
CVE-2026-27540 WooCommerce Flaw Exploited
in the wild1
Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites
in the wild 3 min1
Boost Engagement with Free Passkeys by Wordfence
1
Hackers target WordPress sites via third-party WooCommerce plugin
in the wild 2 min2
WordPress Events Calendar Vulnerabilities Let Hackers Take Over 600,000 Websites
4 min
Critical WordPress Plugin Flaws Put Over 600,000 Websites at Risk of Takeover
3 min
Attackers Actively Exploiting Critical Vulnerability in WooCommerce Wholesale Lead Capture Plugin
in the wild1
Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin
datasette-publish-fly 1.4
2
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
in the wild 2 min
Attackers Actively Exploiting Critical Vulnerability in Super Forms Plugin
in the wild
llm-openrouter 0.7.1
1
llm-gemini 0.34
datasette-mcp 0.2
5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin
400,000 WordPress Sites Affected by Account Takeover Vulnerability in TranslatePress WordPress Plugin
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
in the wild 2 min
One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin
Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin
[webapps] Blocksy Companion 2.1.46 - RCE
WordPress Plugins Compromised Without a Single File Change
in the wild