Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
XSS Vulnerability Found In Real-Time Find and Replace WordPress Plugin
A serious security flaw discovered in a WordPress plugin risked over 100,000 websites. Researchers identified it as an XSS vulnerabilityXSS Vulnerability Found…
Serious Security Vulnerabilities Discovered In Rank Math WordPress Plugin
Extending the stream of vulnerable WordPress plugins, now joins Rank Math. Reportedly, a couple of serious security vulnerabilities existed inSerious Security …
Vulnerability In WPvivid Backup Plugin Could Expose Files Of WordPress Sites
Researchers found a serious security vulnerability in the WPvivid Backup plugin threatening numerous WordPress sites. Upon exploitation, this plugin vulnerabil…
Many Users Hacked Via Fake Google Chrome Update From Compromised WordPress Websites
Hackers are exploiting various websites to conduct phishing attacks. These websites redirect users to fake sites prompting a malicious ChromeMany Users Hacked …
Popup Builder WordPress Plugin Vulnerability Risked Over 100K Websites
A WordPress plugin with a vulnerability threatened the integrity of thousands of websites. The vulnerability existed in the Popup BuilderPopup Builder WordPres…
Actively Exploited Duplicator WordPress Plugin Exploit Risks 1 Million Websites
Joining the trail of vulnerable WordPress plugins, here comes another plugin that threatens the security of over 1 million websites.Actively Exploited Duplicat…
Zero-Day Bug In ThemeREX WordPress Plugin Exploited In The Wild
Researchers have discovered a zero-day vulnerability in WordPress plugin ThemeREX. Exploiting the flaw allows an unauthenticated adversary to execute codesZero…
Vulnerability In WordPress Plugin ThemeGrill Demo Importer Allowed Wiping of a Victim Website
A WordPress plugin threatened the integrity of thousands of websites. This time, the vulnerability appeared in the ThemeGrill Demo ImporterVulnerability In Wor…
Critical Bug in WordPress Theme Plugin Opens 200,000 Sites to Hackers
A popular WordPress theme plugin with over 200,000 active installations contains a severe but easy-to-exploit software vulnerability that, if left unpatched, c…
Vulnerability In WordPress GDPR Cookie Consent Plugin Risks 700K Websites
Another WordPress plugin has now joined the list of plugins exhibiting threatening security flaws. This time, the vulnerability appeared inVulnerability In Wor…
WordPress Plugin “Code Snippets” Vulnerability Risked Over 200K Websites
Researchers have found another WordPress plugin to be posing a threat to hundreds of thousands of websites. Specifically, they aWordPress Plugin “Code Snippets…
Critical Bug In Two WordPress Plugins Risked Over 320K Websites
Once again, thousands of WordPress websites are exposed to security threats due to vulnerable plugins. Researchers have found a criticalCritical Bug In Two Wor…
Debian LTS: DLA-2067-1: wordpress security upda
An input sanitization bypass was discovered in Wordpress, a popular content management framework. An attacker can use this flaw to send malicious scripts to an…
Debian: DSA-4599-1: wordpress security upda
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cros…
Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites
Attention WordPress users!Your website could easily get hacked if you are using "Ultimate Addons for Beaver Builder," or "Ultimate Addons for Elementor" and ha…
Using WPScan to find WordPress vulnerabilities on your websi
Are you a security-conscious WordPress user? WPScan is an open source WordPress security scanner. You can use it to scan your WordPress website for known vulne…
Jetpack WordPress Plugin Vulnerability Affected Numerous Websites ' Patch Now!
Heads up WordPress admins! A researcher has found a critical vulnerability in the Jetpack WordPress plugin. Fortunately, a fix isJetpack WordPress Plugin Vulne…
Debian LTS: DLA-1980-1: wordpress security update
Several vulnerabilities in wordpress, a web blogging tool, have been fixed.
Hackers Deployed Fake UpdraftPlus Plugins With Backdoor To Infect WordPress Websites
Once again, hackers have devised a new strategy to infect WordPress websites. This time, researchers have found them exploiting fakeHackers Deployed Fake Updra…
Debian LTS: DLA-1960-1: wordpress security update
Several cross-site scripting (XSS) vulnerabilities were discovered in Wordpress, a popular content management framework. An attacker can use these flaws to sen…
Unpatched Vulnerability In WordPress Plugin “Rich Reviews” Is Under Active Exploit
Almost a month ago, researchers highlighted multiple WordPress plugins that had serious vulnerabilities. Specifically, these plugins had numerous vulnerabiliti…
OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclos…
Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack
Cybersecurity researchers have unearthed a new ongoingMagecart-style web skimmer campaign that's designed to steal personally identifiable information (PII) an…
New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin
A recently discovered wave of malware attacks has been spotted using a variety of tactics to enslave susceptible machines with easy-to-guess administrative cre…