Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Severe Security Flaw Exposes Over a Million WordPress Sites to Hijack
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
New Flaw in WordPress Plugin Used by Over a Million Sites Under Active Exploitation
A security vulnerability has been disclosed in the popular WordPress pluginEssential Addons for Elementorthat could be potentially exploited to achieve elevate…
New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks
Users of Advanced Custom Fields plugin for WordPress are being urged to update version 6.1.6 following the discovery of a security flaw.The issue, assigned the…
Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy Backdoors
Researchers found active exploitation of the Eval PHP WordPress plugin to deploy backdoors on target…Hackers Abuse Outdated Eval PHP WordPress Plugin To Deploy…
Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign
Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware calledBalada Injectorsince 2017.The massive ca…
Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!
Unknown threat actors are actively exploiting a recently patched security vulnerability in the Elementor Pro website builder plugin for WordPress.The flaw, des…
Critical Vulnerability Fixed In WooCommerce Payments WordPress Plugin
A serious authentication vulnerability existed in the WordPress plugin WooCommerce Payments, exploiting which could allow…Critical Vulnerability Fixed In WooCo…
LearnPress Plugin Vulnerabilities Risk Numerous WordPress Sites
Researchers discovered multiple vulnerabilities in the LearnPress WordPress plugin, allowing SQL injection and file inclusion…LearnPress Plugin Vulnerabilities…
Linux Malware Exploits 30 Vulnerabilities To Target WordPress Websites
Heads up, WordPress admins! Researchers have warned users of a new Linux malware that targets…Linux Malware Exploits 30 Vulnerabilities To Target WordPress Web…
WordPress Security Alert: New Linux Malware Exploiting Over Two Dozen CMS Flaws
WordPress sites are being targeted by a previously unknown strain of Linux malware that exploits flaws in over two dozen plugins and themes to compromise vulne…
Debian: DSA-5279-2: wordpress security update
The wordpress package released in DSA-5279-1 had incorrect dependencies that could not be satisfied in Debian stable: this update corrects the problem. For ref…
Debian LTS: DLA-3163-1: wordpress security update
Several security vulnerabilities have been discovered in Wordpress, a popular content management framework. Possible SQL injection and cross-site scripting (XS…
Debian LTS: DLA-3141-1: wordpress security update
Several security vulnerabilities were discovered in Wordpress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XS…
Fedora 35: wordpress 2022-d7526a0af3
**Wordpress 5.9.4 Security Release**
Fedora 36: wordpress 2022-3efca55d7a
[WordPress 6.0.2 Security and Maintenance Release](https://wordpress.org/news/2022/08/wordpress-6-0-2-security-and- maintenance-release/)
Actively Exploited Zero-Day Vulnerability Found In WPGateway WordPress Plugin
A zero-day vulnerability in the WPGateway WordPress plugin recently surfaced online following active exploits. The…Actively Exploited Zero-Day Vulnerability Fo…
Six-Year-Old Blind SSRF Vulnerability Risks WordPress Sites To DDoS Attacks
Researchers discovered a severe blind SSRF vulnerability in WordPress that could allow DDoS attacks. Notably,…Six-Year-Old Blind SSRF Vulnerability Risks WordP…
Zero-Day Vulnerability Found In WordPress Plugin Backup Buddy
A severe zero-day vulnerability in the Backup Buddy plugin has been revealed. The researchers detected…Zero-Day Vulnerability Found In WordPress Plugin Backup …
Experts Notice Sudden Surge in Exploitation of WordPress Page Builder Plugin Vulnerability
Researchers from Wordfence havesoundedthe alarm about a "sudden" spike in cyber attacks attempting to exploit an unpatched flaw in a WordPress plugin calledKas…
Researcher Discloses A WordPress CSP Bypass Publicly After Not Hearing From the Publishers
A security researcher has shared two CSP bypass scenarios affecting WordPress websites. Both methods involve…Researcher Discloses A WordPress CSP Bypass Public…
Multiple Vulnerabilities Found In Jupiter WordPress Theme
Researchers discovered multiple security vulnerabilities in the Jupiter WordPress theme. While vendors have patched the…Multiple Vulnerabilities Found In Jupit…
Debian LTS: DLA-2956-1: wordpress security upda
Several vulnerabilities like Prototype Pollution Vulnerability in a jQuery dependency and in the block editor, and Stored Cross Site Scripting Vulnerability we…
Fedora 35: wordpress 2022-956b6078
WordPress 5.9.2 Security & Maintenance Release
Fedora 34: wordpress 2022-4b3079c1
WordPress 5.8.4 Security Release