Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Experts Notice Sudden Surge in Exploitation of WordPress Page Builder Plugin Vulnerability
Researchers from Wordfence havesoundedthe alarm about a "sudden" spike in cyber attacks attempting to exploit an unpatched flaw in a WordPress plugin calledKas…
Multiple Vulnerabilities Found In Jupiter WordPress Theme
Researchers discovered multiple security vulnerabilities in the Jupiter WordPress theme. While vendors have patched the…Multiple Vulnerabilities Found In Jupit…
Debian LTS: DLA-2956-1: wordpress security upda
Several vulnerabilities like Prototype Pollution Vulnerability in a jQuery dependency and in the block editor, and Stored Cross Site Scripting Vulnerability we…
Vulnerability In UpdraftPlus WordPress Plugin Could Expose Backups
A severe vulnerability in the UpdraftPlus WordPress plugin could expose backups to subscribers. Thankfully, the…Vulnerability In UpdraftPlus WordPress Plugin C…
Critical Code Execution Bugs Found In PHP Everywhere WordPress Plugin
Researchers discovered a number of severe security bugs leading to code execution in the WordPress…Critical Code Execution Bugs Found In PHP Everywhere WordPre…
Code Injection Vulnerability Found In HTML Mail WordPress Plugin
A serious code injection vulnerability riddled the WordPress HTML Mail plugin, thus potentially putting thousands…Code Injection Vulnerability Found In HTML Ma…
Debian LTS: DLA-2884-1: wordpress security upda
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 Websites
Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicio…
Debian: DSA-5039-1: wordpress security upda
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
Subdomain Takeover Flaw Affected Flywheel WordPress Hosting Platform
A security researcher discovered a serious subdomain takeover vulnerability in the WordPress hosting platform Flywheel.…Subdomain Takeover Flaw Affected Flywhe…
Hackers Attacked 1.6 Million WordPress Sites Via Four Different Vulnerable Plugins
In a recent wave of attacks, hackers targeted 1.6 million WordPress sites by exploiting unpatched…Hackers Attacked 1.6 Million WordPress Sites Via Four Differe…
Multiple Vulnerabilities Spotted In Hide My WP WordPress Plugin
Numerous vulnerabilities in Hide My WP plugin WordPress plugin could pose serious security risks to…Multiple Vulnerabilities Spotted In Hide My WP WordPress Pl…
Starter Templates Plugin Flaw Affected 1M+ WordPress Sites
A major security flaw in Starter Templates Plugin could allow underprivileged authenticated users to import…Starter Templates Plugin Flaw Affected 1M+ WordPres…
HashThemes Demo Importer Plugin Bug Could Allow Wiping WordPress Sites
WordPress admins have to deal with another vulnerable WordPress plugin that poses a highly severe…HashThemes Demo Importer Plugin Bug Could Allow Wiping WordPr…
Cross-Site Scripting Vulnerability Riddled NextScripts WordPress Plugin
Heads up, WordPress admins! The NextScripts WordPress plugin had a serious cross-site scripting vulnerability that…Cross-Site Scripting Vulnerability Riddled N…
OptinMonster Plugin Bug Potentially Risked Over A Million WordPress Websites
A serious information disclosure bug existed in the WordPress plugin OptinMonster. Exploiting the vulnerability could…OptinMonster Plugin Bug Potentially Riske…
Critical Vulnerabilities Discovered in Fastest Cache Plugin For WordPress
Heads up, WordPress admins! Make sure to update your websites with the latest WP Fastest…Critical Vulnerabilities Discovered in Fastest Cache Plugin For WordPr…
Debian: DSA-4985-1: wordpress security upda
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform Cross-Site Scripting (XSS) attacks or imper…
Multiple Vulnerabilities Spotted In elFinder File Manager WordPress Plugin
Numerous critical security vulnerabilities riddled the file manager plugin elFinder. Exploiting these bugs could allow…Multiple Vulnerabilities Spotted In elFi…
SEOPress WordPress Plugin Vulnerability Potentially Risked Over 100K Sites
A serious vulnerability in the SEOPress plugin posed a threat to thousands of WordPress websites.…SEOPress WordPress Plugin Vulnerability Potentially Risked Ov…
Debian LTS: DLA-2731-1: wordpress security upda
One security issue affects WordPress, a weblog manager, versions between 3.7 and 5.7. This update fixes the following security issues: Object injection in PHPM…
WordPress Download Manager Plugin Vulnerabilities Could Allow Code Execution
Heads up, WordPress admins! A couple of security vulnerabilities have been found in the WordPress…WordPress Download Manager Plugin Vulnerabilities Could Allow…
Critical Vulnerabilities Spotted In WordPress Plugin Frontend File Manager
Another WordPress plugin has received major security updates after being riddled with numerous flaws. This…Critical Vulnerabilities Spotted In WordPress Plugin…
Critical ProfilePress WordPress Plugin Vulnerabilities Risked Code Execution
Heads up, WordPress admins! Numerous security vulnerabilities were discovered in the ProfilePress WordPress plugin that…Critical ProfilePress WordPress Plugin …