Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#plugin-security — news, CVEs and analysis · ZeroHour

07:57 UTC· 5m ago

today 46 visits · 59 views · 7 reads·all time 17K views

Tag

#plugin-security

1 stories this week · 9 this month · 11 in 6 months · mostly security

stories per day · 30 days

Related#wordpress 8 #wordfence 5 #rce 3 #supply-chain 3 #automated-review 2 #cms 2 #jetpack-scan 2 #php-object-injection 2 #ai-agents 1 #arbitrary-file-upload 1 #bug-bounty 1 #claude-code 1 #codex 1 #defiant 1 #gemini-cli 1 #github-copilot 1 #gravity-forms 1 #llm-agents 1

11 stories, newest first · one card per story

Wordfence·2d ago

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 14, 2026 to September 20, 2026)

#wordpress #wordfence #vulnerability

The Hacker News·8d ago

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

#ai-agents #claude-code #codex

4 min1

GBHackers·8d ago high

Over 100,000 WordPress Sites Exposed to RCE Through Tutor LMS Vulnerability

#php-object-injection #plugin-security #rce

4 min4

SecurityWeek·10d ago high

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

#defiant #php-object-injection #plugin-security

2 min2

arXiv cs.CR·11d ago

Plug 'n' Pray: Agentic LLM-based Detection of Potential Log File Exposures in Third-Party Content Management System Plugins

#cms #llm-agents #log-exposure

Research

The Hacker News·12d ago

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

#automated-review #jetpack-scan #plugin-security

3 min1

Wordfence·12d ago

Wordfence Bug Bounty Program Monthly Report – May 2026

#bug-bounty #plugin-security #vulnerability-disclosure

Help Net Security·16d ago

WordPress adds automated security checks to block risky plugin releases

#automated-review #jetpack-scan #plugin-security

2 min

Wordfence·25d ago high

Wordfence Argus Finds Unauthenticated Arbitrary File Upload Vulnerability in Gravity Forms

#arbitrary-file-upload #gravity-forms #plugin-security

Wordfence·Aug 27, 2026 high

Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin

#authentication-bypass #plugin-security #rce

The Hacker News·Aug 17, 2026 high

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

#arbitrary-file-upload #authentication-bypass #forminator-forms

3 min