Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#wordpress — news, CVEs and analysis · ZeroHour

today 43 visits · 56 views · 7 reads·all time 17K views

06:59 UTC· 6m ago

Tag

#wordpress

41 stories this week · 103 this month · 126 in 6 months · mostly security

stories per day · 30 days

Related#rce 43 #wordfence 30 #cve-2026-87902 16 #path-traversal 13 #cms 12 #patchstack 12 #plugin 12 #automattic 10 #patch 10 #clickfix 8 #php-object-injection 8 #plugin-security 8 #supply-chain 8 #woocommerce 8 #backdoor 7 #click2shell 7 #cloudflare 7 #csrf 7

99 stories, newest first · one card per story

1–24 of 99← Prev1 / 5Next →

Patchstack·21h ago high

Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites

#elementor #wordpress #csrf

3 sources 9 min

Cyber Security News·23h ago critical

Hackers Actively Exploiting WordPress Vulnerability to Execute Malicious Code

#wordpress #cve-2026-87902 #local-file-inclusion

16 sources in the wild 3 min5

Wordfence·1d ago

Wordfence Bug Bounty Program Monthly Report – June 2026

#wordfence #wordpress #bug-bounty

BleepingComputer·1d ago high

WordPress Click2Shell flaw lets hackers execute PHP on the server

#wordpress #click2shell #csrf

6 sources 3 min

CISA Advisories·1d ago high

CISA Adds One Known Exploited Vulnerability to Catalog

#bod-26-04 #cisa #cve-2026-87902

CVE-2026-87902

in the wild

Wordfence·2d ago

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 14, 2026 to September 20, 2026)

#wordpress #wordfence #vulnerability

The Hacker News·2d ago high

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

#cpanel #whm #wp-toolkit

6 sources 3 min

Infosecurity Magazine·3d ago

New Exvicy ClickFix Framework Built on Rival ErrTraffic's Code

#exvicy #clickfix #errtraffic

2 sources in the wild 2 min

Cyber Security News·4d ago high

WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected

#wordpress #malware #etherhiding

3 sources in the wild 6 min1

Wordfence·4d ago high

PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core

#wordpress #path-traversal #local-file-inclusion

BleepingComputer·4d ago high

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

#red-heron #wordpress #zyxel

in the wild 3 min1

Hacker News · security·4d ago high

WordPress: Unauthenticated path traversal leading to conditional RCE

#wordpress #path-traversal #rce

Vulnerability

GBHackers·4d ago critical

Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data

#breach #chinese-threat-actor #cve-2026-60137

2 sources in the wild 5 min2

Cyber Security News·6d ago critical

Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 Used to Hack OpenAI, and 20+ Stories

#cisco #ise #zero-day

in the wild 14 min2

GreyNoise·6d ago high

Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation

#apt #china #cve-2026-63030

in the wild 15 min

Cyber Security News·8d ago high

Click2Shell WordPress Flaw Lets Attackers Gain RCE With a Single Malicious Link

#click2shell #csrf #exploit-chain

4 min1

Security Affairs·8d ago critical

Brevo Supply-Chain Attack Infected Over 100,000 Websites

#brevo #clickfix #cloudflare

in the wild 4 min2

Patchstack·8d ago high

Click2Shell: The RCE WordPress 7.1.1 Just Patched

#click2shell #csrf #jquery

4 min1

Wordfence·8d ago high

Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server

#code-execution #file-disclosure #heic

TechCrunch · AI·8d ago

Automattic’s 33-Hour Coup, and can AI labs police themselves?

#ai-safety #anthropic #automattic

3 min

The Hacker News·8d ago high

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

#click2shell #csrf #patch

3 min2

SecurityWeek·8d ago

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

#ai-agents #info-stealer #ransomware

in the wild 5 min2

Cyber Security News·8d ago high

Tutor LMS Flaw Exposes 100,000+ WordPress Sites to Remote Code Execution

#cve-2026-78175 #php-object-injection #plugin-vulnerability

4 min

GBHackers·8d ago high

Over 100,000 WordPress Sites Exposed to RCE Through Tutor LMS Vulnerability

#php-object-injection #plugin-security #rce

4 min4