Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-4709-1: wordpress security upda
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) attacks,…
Hackers Target Over A Million WordPress Sites To Steal Credentials
Researchers caught a recent malicious campaign targeting more than a million WordPress websites. As discovered, the hackers targeted all theseHackers Target Ov…
PageLayer WordPress Plugin Vulnerabilities Risked Over 200K Websites
Continuing with the trail of vulnerable plugins, now joins PageLayer. Researchers found some serious vulnerabilities in PageLayer WordPress plugin thatPageLaye…
Critical Vulnerability Found In MapPress Maps WordPress Plugin
Heads up WordPress admins! Another WordPress plugin is found to have a serious vulnerability affecting thousands of websites. This time,Critical Vulnerability …
Google WordPress Plugin Bug Allowed Attackers To Access Google Search Console
Continuing the list of plugins risking WordPress websites, now joins Site Kit by Google. This Google WordPress plugin had aGoogle WordPress Plugin Bug Allowed …
Page Builder WordPress Plugin Bugs Could Allow Complete Site Takeover
Another WordPress plugin with over 1 million active installations has made it to the news due to security bugs. ThisPage Builder WordPress Plugin Bugs Could Al…
Debian LTS: DLA-2208-1: wordpress security upda
Multiple CVE(s) were discovered in the src:wordpress package. CVE-2020-11026
Bugs Two Related WordPress Plugins Together Risked Over 1 Million Websites
WordPress websites suffered another threat from vulnerable plugins. This time, security bugs in two related WordPress plugins posed a threatBugs Two Related Wo…
Bugs in Two Related WordPress Plugins Together Risked Over 1 Million Websites
WordPress websites suffered another threat from vulnerable plugins. This time, security bugs in two related WordPress plugins posed a threatBugs in Two Related…
CSRF To XSS Vulnerability In Ninja Forms Risked Over 1 Million WordPress Sites
A vulnerability in popular Ninja Forms plugin posed a threat to over a million WordPress sites. This CSRF vulnerability couldCSRF To XSS Vulnerability In Ninja…
Debian: DSA-4677-1: wordpress security upda
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cros…
XSS Vulnerability Found In Real-Time Find and Replace WordPress Plugin
A serious security flaw discovered in a WordPress plugin risked over 100,000 websites. Researchers identified it as an XSS vulnerabilityXSS Vulnerability Found…
Serious Security Vulnerabilities Discovered In Rank Math WordPress Plugin
Extending the stream of vulnerable WordPress plugins, now joins Rank Math. Reportedly, a couple of serious security vulnerabilities existed inSerious Security …
Vulnerability In WPvivid Backup Plugin Could Expose Files Of WordPress Sites
Researchers found a serious security vulnerability in the WPvivid Backup plugin threatening numerous WordPress sites. Upon exploitation, this plugin vulnerabil…
Many Users Hacked Via Fake Google Chrome Update From Compromised WordPress Websites
Hackers are exploiting various websites to conduct phishing attacks. These websites redirect users to fake sites prompting a malicious ChromeMany Users Hacked …
Popup Builder WordPress Plugin Vulnerability Risked Over 100K Websites
A WordPress plugin with a vulnerability threatened the integrity of thousands of websites. The vulnerability existed in the Popup BuilderPopup Builder WordPres…
Actively Exploited Duplicator WordPress Plugin Exploit Risks 1 Million Websites
Joining the trail of vulnerable WordPress plugins, here comes another plugin that threatens the security of over 1 million websites.Actively Exploited Duplicat…
Zero-Day Bug In ThemeREX WordPress Plugin Exploited In The Wild
Researchers have discovered a zero-day vulnerability in WordPress plugin ThemeREX. Exploiting the flaw allows an unauthenticated adversary to execute codesZero…
Vulnerability In WordPress Plugin ThemeGrill Demo Importer Allowed Wiping of a Victim Website
A WordPress plugin threatened the integrity of thousands of websites. This time, the vulnerability appeared in the ThemeGrill Demo ImporterVulnerability In Wor…
Critical Bug in WordPress Theme Plugin Opens 200,000 Sites to Hackers
A popular WordPress theme plugin with over 200,000 active installations contains a severe but easy-to-exploit software vulnerability that, if left unpatched, c…
Vulnerability In WordPress GDPR Cookie Consent Plugin Risks 700K Websites
Another WordPress plugin has now joined the list of plugins exhibiting threatening security flaws. This time, the vulnerability appeared inVulnerability In Wor…
WordPress Plugin “Code Snippets” Vulnerability Risked Over 200K Websites
Researchers have found another WordPress plugin to be posing a threat to hundreds of thousands of websites. Specifically, they aWordPress Plugin “Code Snippets…
Critical Bug In Two WordPress Plugins Risked Over 320K Websites
Once again, thousands of WordPress websites are exposed to security threats due to vulnerable plugins. Researchers have found a criticalCritical Bug In Two Wor…
Debian LTS: DLA-2067-1: wordpress security upda
An input sanitization bypass was discovered in Wordpress, a popular content management framework. An attacker can use this flaw to send malicious scripts to an…