Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Android Malware Wpeeper Uses Compromised WordPress Sites to Hide C2 Servers
Cybersecurity researchers have discovered a previously undocumented malware targeting Android devices that uses compromised WordPress sites as relays for its a…
Multiple Vulnerabilities Found In Forminator WordPress Plugin
WordPress admins using the Forminator plugin on their websites must rush to update their sites…Multiple Vulnerabilities Found In Forminator WordPress Plugin on…
Fedora 38: wordpress 2024-0a2f144348 Security Advisory Updates
WordPress 6.4.4 Security Release Security updates included in this release A cross-site scripting (XSS) vulnerability affecting the Avatar block type; reported…
LayerSlider WordPress Plugin Vulnerability Affected Thousands Of Websites
WordPress admins using the LayerSlider plugin on their websites must update their sites with the…LayerSlider WordPress Plugin Vulnerability Affected Thousands …
Critical Security Flaw Found in Popular LayerSlider WordPress Plugin
A critical security flaw impacting the LayerSlider plugin for WordPress could be abused to extract sensitive information from databases, such as password hashe…
Sign1 Malware Targeted Over 2500 WordPress Sites In Recent Campaign
Heads up, WordPress admins! A new malware campaign is actively preying on WordPress websites, generating…Sign1 Malware Targeted Over 2500 WordPress Sites In Re…
Popup Builder Plugin Flaw Exploited To Infect WordPress Sites
Heads up, WordPress admins! It’s time to update your WordPress websites with the latest Popup…Popup Builder Plugin Flaw Exploited To Infect WordPress Sites on …
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites
A new malware campaign is leveraging a high-severity security flaw in the Popup Builder plugin for WordPress to inject malicious JavaScript code.According to S…
WordPress Sites Exploited To Brute-Force Passwords Via Users’ Browsers
According to a recent post from Sucuri, their website scanner detected an active distributed brute-force…WordPress Sites Exploited To Brute-Force Passwords Via…
Debian LTS: DLA-3756-1: wordpress security update
Two security vulnerabilities have been discovered in Wordpress, a popular content management framework, a PHP File Upload bypass via the plugin installer and a…
WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk
A security vulnerability has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges.Tr…
WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites
A critical security flaw has been disclosed in a popular WordPress plugin called Ultimate Member that has more than 200,000 active installations.The vulnerabil…
WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites
A critical security flaw in the Bricks theme for WordPress is being actively exploited by threat actors to run arbitrary PHP code on susceptible installations.…
Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability
Thousands of WordPress sites using a vulnerable version of the Popup Builder plugin have been compromised with a malware called Balada Injector.First documente…
New WordPress Update Addressed A POP Chain RCE Vulnerability
Heads up, WordPress admins! Ensure updating your websites at the earliest as a severe remote…New WordPress Update Addressed A POP Chain RCE Vulnerability on La…
WordPress Releases Update 6.4.2 to Address Critical Remote Attack Vulnerability
WordPress has released version 6.4.2 with a patch for a critical security flaw that could be exploited by threat actors by combining it with another bug to exe…
Researchers Uncover Malware Posing as WordPress Caching Plugin
Cybersecurity researchers have shed light on a new sophisticated strain of malware that masquerades as a WordPress plugin to stealthily create administrator ac…
Unraveling the New WordPress Vulnerabilities: Safeguarding Your Digital Fortress
Thank you to Ruth Webb for contributing this article.WordPress stands tall as one of the most popular content management systems (CMS), empowering millions of …
AIOS WordPress Plugin Found Logging Passwords And More In Plaintext
The WordPress security plugin All-in-One Security (AIOS) silently logged users’ sign-in activities and passwords in…AIOS WordPress Plugin Found Logging Passwor…
Ultimate Member Plugin Zero-Day Risks 200K+ WordPress Sites
Heads up, WordPress admins! Researchers have caught a zero-day vulnerability in the Ultimate Member WordPress…Ultimate Member Plugin Zero-Day Risks 200K+ WordP…
Critical Security Flaw in Social Login Plugin for WordPress Exposes Users' Accounts
A critical security flaw has been disclosed in miniOrange'sSocial Login and Register pluginfor WordPress that could enable a malicious actor to log in as any u…
Debian LTS: DLA-3462-1: wordpress security update
Several security vulnerabilities have been addressed in Wordpress, a popular content management framework. WordPress Core is vulnerable to Directory Traversal …
Jetpack Plugin Patched A Critical Vulnerability Triggering WordPress Force-Installs
The popular and one of the most-used WordPress plugins, Jetpack recently addressed a critical security…Jetpack Plugin Patched A Critical Vulnerability Triggeri…
How To Secure Against WordPress Vulnerabilities with Predictive Analysis Detection & Automated Remediation
WordPress is one of the most popular content management systems in the world due to the ability it gives non-technical, inexperienced users to create professio…