CVE-2026-62071: Unauthenticated SQL Injection in WordPress File Upload Plugin 2026-10-01 75 CosmicBytez Labs Not Subscribed
WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution 2026-09-25 78 TechRepublic Security Not Subscribed
CVE-2026-87902: Critical WordPress Core Flaw Enables Unauthenticated RCE Under Certain Conditions 2026-09-23 80 SOC Prime Blog Not Subscribed
Hackers target WordPress sites via third-party WooCommerce plugin 2026-09-15 75 Bleeping Computer Not Subscribed
Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors 2026-09-15 90 GBHackers Not Subscribed
WordPress Plugin Flaw Exposes 5 Million Sites to SQL Injection Attacks 2026-09-03 75 cybersecurityNews.com Not Subscribed
WordPress backup plugin flaw exposes millions of sites to takeover attacks 2026-09-02 75 Bleeping Computer Not Subscribed
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE 2026-08-29 75 The Hacker News Not Subscribed
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE 2026-08-29 75 CosmicBytez Labs Not Subscribed
WordPress Plugin Vulnerability Exposes 100,000 Sites to Complete Site Takeover Attacks 2026-08-24 90 cybersecurityNews.com Not Subscribed
WordPress XSS2Shell Flaw Enables Attackers to Achieve Remote Code Execution 2026-08-08 75 GBHackers Not Subscribed
CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution 2026-08-07 70 securityonline.info Not Subscribed
Critical wp2shell Vulnerability Hits WordPress Core, Patch Released 2026-07-30 78 The Cyber Express Not Subscribed
Exploited in the Wild: CVE-2026-18072 (CVSS 9.8) Grants Full Administrative Control to 20,000 WordPress Sites 2026-07-29 90 securityonline.info Not Subscribed
Warning: Critical, Actively Exploited Remote Code Execution in WordPress Core (CVE-2026-63030, CVE-2026-60137), Patch Immediately!
2026-07-22 90 Centre for Cybersecurity Belgium Advisories Feed Not Subscribed
Critical wp2shell WordPress flaws exploited to install webshells 2026-07-21 80 Bleeping Computer Not Subscribed
Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn 2026-07-21 85 TechRepublic Security Not Subscribed
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning 2026-07-21 90 The Hacker News Not Subscribed
Attackers pummel critical WordPress vuln to create all sorts of mischief 2026-07-20 82 The Register (Security) Not Subscribed
WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th) 2026-07-20 80 SANS ISC Diary Not Subscribed
Hackers Exploit Critical WordPress Vulnerabilities, Millions at Risk 2026-07-20 90 ThreatCluster Not Subscribed
Critical RCE Vulnerability in WordPress Core Exploited in the Wild 2026-07-19 90 ThreatCluster Not Subscribed
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits 2026-07-19 85 Security Affairs Not Subscribed
Critical WordPress Core Flaw Lets Anonymous Hackers Gain Remote Code Execution 2026-07-18 90 GBHackers Not Subscribed
Critical WordPress wp2shell Flaw Lets Anonymous Attackers Execute Remote Code 2026-07-18 80 Cyber Press Not Subscribed
WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public 2026-07-18 78 securityonline.info Not Subscribed
CVE-2025-6254: WordPress Doctreat Core Plugin Privilege Escalation (CVSS 9.8) 2026-06-11 85 CosmicBytez Labs Not Subscribed
Critical WordPress Plugin Flaw Allows Unauthorized Access to Websites 2026-05-14 85 GBHackers Not Subscribed
40,000+ Sites Exposed: Critical 9.8 CVSS Flaw Grants Total WordPress Account Takeover 2026-05-02 90 securityonline.info Not Subscribed
Critical WordPress Plugin Flaw Lets Attackers Bypass Authentication and Gain Admin Access 2026-04-13 90 cybersecurityNews.com Not Subscribed
Critical WordPress Plugin Bug Allows Authentication Bypass, Admin Takeover 2026-04-13 72 Cyber Press Not Subscribed
WordPress Plugin Vulnerability Enables Admin Takeover via Auth Bypass 2026-04-13 90 GBHackers Not Subscribed
WordPress Membership Plugin Flaw Lets Attackers Create Admin Accounts 2026-03-06 90 GBHackers Not Subscribed
WordPress membership plugin bug exploited to create admin accounts 2026-03-05 75 Bleeping Computer Not Subscribed
WordPress Security Alert: Critical Privilege Escalation Flaw in Popular Membership Plugin 2026-03-04 85 securityonline.info Not Subscribed
WordPress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks 2026-02-12 78 cybersecurityNews.com Not Subscribed
WordPress Backup Plugin Vulnerability Exposes 800,000 Sites to Remote Code Execution Attacks 2026-02-12 85 GBHackers Not Subscribed
ACF plugin bug gives hackers admin on 50,000 WordPress sites 2026-01-20 70 Bleeping Computer Not Subscribed
Critical WordPress Plugin Vulnerability Exposes 100,000+ Websites to Privilege Escalation Attacks 2026-01-20 85 GBHackers Not Subscribed
Hackers Actively Exploiting Worpress Plugin Vulnerability to Execute Remote Code 2025-12-04 86 cybersecurityNews.com Not Subscribed
Critical flaw in WordPress add-on for Elementor exploited in attacks 2025-12-03 78 Bleeping Computer Not Subscribed
Severe WordPress Plugin Flaw Puts Over 600,000 Sites at Risk of Remote Takeover 2025-07-02 78 Cyber Press Not Subscribed
20,000 WordPress Sites at Risk of File Upload & Deletion Exploits 2025-04-02 72 GBHackers Not Subscribed
Critical WordPress Plug-in Flaw Exposes 4M Sites to Takeover 2024-11-18 78 Dark Reading Not Subscribed
Hackers are exploiting critical bug in LiteSpeed Cache plugin 2024-08-22 90 Bleeping Computer Not Subscribed
Litespeed Cache bug exposes millions of WordPress sites to takeover attacks 2024-08-21 85 Bleeping Computer Not Subscribed
Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites 2024-05-08 75 The Hacker News Not Subscribed
Hackers exploit LiteSpeed Cache flaw to create WordPress admins 2024-05-07 75 Bleeping Computer Not Subscribed
Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites 2024-04-26 78 The Hacker News Not Subscribed
WP Automatic WordPress plugin hit by millions of SQL injection attacks 2024-04-25 85 Bleeping Computer Not Subscribed
