Thousands of sites running WordPress remain unpatched against a critical security flaw in a widely used plugin that was being ...

The flaw allows crooks to install other plugins from the WP repository, including those with known RCE flaws ...

Security researchers found a flaw in WPForms, a popular WordPress plugin for forms The bug allows malicious actors to ask for ...

A major anti-spam plugin for top website builder WordPress carried a pair of critical severity vulnerabilities which allowed ...

Hackers are exploiting a critical vulnerability in the "Hunk Companion" plugin to install and activate other plugins with exploitable flaws directly from the WordPress.org repository.

A critical authentication bypass vulnerability has been discovered impacting the WordPress plugin 'Really Simple Security' (formerly 'Really Simple SSL'), including both free and Pro versions ...

A critical vulnerability was discovered in a popular WordPress security plugin with over 4 million installations. The flaw allows attackers to log in as any user, including administrators ...

The Broken Link Checker is a plugin that checks for broken links but is not commonly used in this sample of sites. Google ...

Wordfence, a cybersecurity company that specializes in making WordPress security products, has found a critical vulnerability in a plugin used by over 4 million internet websites. The company says ...

Attackers exploit Hunk Companion vulnerability (CVE-2024-11972) to install flawed plugins, enabling RCE attacks on 10,000+ ...