Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#wordfence — news, CVEs and analysis · ZeroHour

06:59 UTC· 9m ago

today 43 visits · 56 views · 7 reads·all time 17K views

Tag

#wordfence

6 stories this week · 30 this month · 36 in 6 months · mostly security

stories per day · 30 days

Related#wordpress 30 #rce 12 #plugin 6 #php-object-injection 5 #plugin-security 5 #woocommerce 5 #arbitrary-file-upload 4 #file-upload 4 #webshell 4 #cve-2026-27540 3 #jetpack-scan 3 #malware 3 #must-use-plugin 3 #plugins 3 #tutor-lms 3 #vulnerability-disclosure 3 #automated-review 2 #backdoor 2

34 stories, newest first · one card per story

1–24 of 34← Prev1 / 2Next →

Wordfence·1d ago

Wordfence Bug Bounty Program Monthly Report – June 2026

#wordfence #wordpress #bug-bounty

Wordfence·2d ago

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 14, 2026 to September 20, 2026)

#wordpress #wordfence #vulnerability

Cyber Security News·4d ago high

WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected

#wordpress #malware #etherhiding

3 sources in the wild 6 min

Wordfence·4d ago high

PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core

#wordpress #path-traversal #local-file-inclusion

Wordfence·8d ago high

Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server

#code-execution #file-disclosure #heic

Cyber Security News·8d ago high

Tutor LMS Flaw Exposes 100,000+ WordPress Sites to Remote Code Execution

#cve-2026-78175 #php-object-injection #plugin-vulnerability

4 min

GBHackers·8d ago high

Over 100,000 WordPress Sites Exposed to RCE Through Tutor LMS Vulnerability

#php-object-injection #plugin-security #rce

4 min4

Wordfence·9d ago high

100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS

#php-object-injection #plugin-vulnerability #remote-code-execution

1

Wordfence·9d ago

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)

#plugins #vulnerability-disclosure #weekly-report

Infosecurity Magazine·10d ago high

PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug

#cve-2026-27540 #file-upload #rce

in the wild 2 min

The Hacker News·11d ago high

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

#arbitrary-file-upload #rce #the-events-calendar

in the wild 3 min

Wordfence·11d ago

Boost Engagement with Free Passkeys by Wordfence

#authentication #passkeys #plugin

1

BleepingComputer·11d ago high

Hackers target WordPress sites via third-party WooCommerce plugin

#cve #file-upload #plugin

in the wild 2 min2

GBHackers·11d ago high

Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors

#cve-2026-27540 #file-upload #rce

in the wild 4 min

Cyber Security News·11d ago high

Hackers Exploit WooCommerce Plugin Bug to Take Over WordPress Sites Without Login

#cve-2026-27540 #file-upload #webshell

in the wild 5 min

GBHackers·11d ago high

WordPress Events Calendar Vulnerabilities Let Hackers Take Over 600,000 Websites

#deserialization #events-calendar #php-object-injection

4 min

Cyber Security News·11d ago high

Critical WordPress Plugin Flaws Put Over 600,000 Websites at Risk of Takeover

#php-object-injection #plugin #rce

3 min

Wordfence·12d ago high

Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin

#events-calendar #plugin #rce

Wordfence·12d ago

Wordfence Bug Bounty Program Monthly Report – May 2026

#bug-bounty #plugin-security #vulnerability-disclosure

GBHackers·16d ago

WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review

#automated-review #backdoor #jetpack-scan

3 min1

Wordfence·16d ago

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)

#plugins #themes #vulnerability-report

Cyber Security News·16d ago

WordPress Uses AI to Stop Malicious Plugin Updates Before They Reach Millions of Websites

#ai-scanning #jetpack-scan #plugin-updates

4 min1

Help Net Security·16d ago

WordPress adds automated security checks to block risky plugin releases

#automated-review #jetpack-scan #plugin-security

2 min

The Hacker News·22d ago high

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

#arbitrary-file-upload #elementor-pro #exploitation

in the wild 4 min1

1