WordPress XSS2Shell Flaw Enables Attackers to Achieve Remote Code Execution 2026-08-08 True GBHackers Not Subscribed
CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution 2026-08-07 True securityonline.info Not Subscribed
Critical wp2shell Vulnerability Hits WordPress Core, Patch Released 2026-07-30 True The Cyber Express Not Subscribed
Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites 2026-07-29 True securityonline.info Not Subscribed
Warning: Critical, Actively Exploited Remote Code Execution in WordPress Core (CVE-2026-63030, CVE-2026-60137), Patch Immediately!
2026-07-22 True Centre for Cybersecurity Belgium Advisories Feed Not Subscribed
Critical wp2shell WordPress flaws exploited to install webshells 2026-07-21 True Bleeping Computer Not Subscribed
Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn 2026-07-21 True TechRepublic Security Not Subscribed
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning 2026-07-21 True The Hacker News Not Subscribed
Attackers pummel critical WordPress vuln to create all sorts of mischief 2026-07-20 True The Register (Security) Not Subscribed
WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th) 2026-07-20 True SANS ISC Diary Not Subscribed
Hackers Exploit Critical WordPress Vulnerabilities, Millions at Risk 2026-07-20 True ThreatCluster Not Subscribed
Critical RCE Vulnerability in WordPress Core Exploited in the Wild 2026-07-19 True ThreatCluster Not Subscribed
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits 2026-07-19 True Security Affairs Not Subscribed
Critical WordPress Core Flaw Lets Anonymous Hackers Gain Remote Code Execution 2026-07-18 True GBHackers Not Subscribed
Critical WordPress wp2shell Flaw Lets Anonymous Attackers Execute Remote Code 2026-07-18 True Cyber Press Not Subscribed
WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public 2026-07-18 True securityonline.info Not Subscribed
CVE-2025-6254: WordPress Doctreat Core Plugin Privilege Escalation (CVSS 9.8) 2026-06-11 True CosmicBytez Labs Not Subscribed
Critical WordPress Plugin Flaw Allows Unauthorized Access to Websites 2026-05-14 True GBHackers Not Subscribed
40,000+ Sites Exposed: Critical 9.8 CVSS Flaw Grants Total WordPress Account Takeover 2026-05-02 True securityonline.info Not Subscribed
Critical WordPress Plugin Flaw Lets Attackers Bypass Authentication and Gain Admin Access 2026-04-13 True cybersecurityNews.com Not Subscribed
Critical WordPress Plugin Bug Allows Authentication Bypass, Admin Takeover 2026-04-13 True Cyber Press Not Subscribed
WordPress Plugin Vulnerability Enables Admin Takeover via Auth Bypass 2026-04-13 True GBHackers Not Subscribed
WordPress Membership Plugin Flaw Lets Attackers Create Admin Accounts 2026-03-06 True GBHackers Not Subscribed
WordPress membership plugin bug exploited to create admin accounts 2026-03-05 True Bleeping Computer Not Subscribed
WordPress Security Alert: Critical Privilege Escalation Flaw in Popular Membership Plugin 2026-03-04 True securityonline.info Not Subscribed
WordPress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks 2026-02-12 True cybersecurityNews.com Not Subscribed
WordPress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks 2026-02-12 True GBHackers Not Subscribed
ACF plugin bug gives hackers admin on 50,000 WordPress sites 2026-01-20 True Bleeping Computer Not Subscribed
Critical WordPress Plugin Vulnerability Exposes 100,000+ Websites to Privilege Escalation Attacks 2026-01-20 True GBHackers Not Subscribed
Hackers Actively Exploiting Worpress Plugin Vulnerability to Execute Remote Code 2025-12-04 True cybersecurityNews.com Not Subscribed
Critical flaw in WordPress add-on for Elementor exploited in attacks 2025-12-03 True Bleeping Computer Not Subscribed
Severe WordPress Plugin Flaw Puts Over 600,000 Sites at Risk of Remote Takeover 2025-07-02 True Cyber Press Not Subscribed
20,000 WordPress Sites at Risk of File Upload & Deletion Exploits 2025-04-02 True GBHackers Not Subscribed
Critical WordPress Plug-in Flaw Exposes 4M Sites to Takeover 2024-11-18 True Dark Reading Not Subscribed
Hackers are exploiting critical bug in LiteSpeed Cache plugin 2024-08-22 True Bleeping Computer Not Subscribed
Litespeed Cache bug exposes millions of WordPress sites to takeover attacks 2024-08-21 True Bleeping Computer Not Subscribed
Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites 2024-05-08 True The Hacker News Not Subscribed
Hackers exploit LiteSpeed Cache flaw to create WordPress admins 2024-05-07 True Bleeping Computer Not Subscribed
Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites 2024-04-26 True The Hacker News Not Subscribed
WP Automatic WordPress plugin hit by millions of SQL injection attacks 2024-04-25 True Bleeping Computer Not Subscribed
WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites 2024-02-27 True The Hacker News Not Subscribed
