Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-4599-1: wordpress security upda
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cros…
Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites
Attention WordPress users!Your website could easily get hacked if you are using "Ultimate Addons for Beaver Builder," or "Ultimate Addons for Elementor" and ha…
Using WPScan to find WordPress vulnerabilities on your websi
Are you a security-conscious WordPress user? WPScan is an open source WordPress security scanner. You can use it to scan your WordPress website for known vulne…
Jetpack WordPress Plugin Vulnerability Affected Numerous Websites ' Patch Now!
Heads up WordPress admins! A researcher has found a critical vulnerability in the Jetpack WordPress plugin. Fortunately, a fix isJetpack WordPress Plugin Vulne…
Debian LTS: DLA-1980-1: wordpress security update
Several vulnerabilities in wordpress, a web blogging tool, have been fixed.
Fedora 31: wordpress FEDORA-2019-f21ad78845
**WordPress 5.2.4 Security Release** WordPress versions 5.2.3 and earlier are affected by these bugs, which are fixed in version 5.2.4. **Security Updates** * …
Hackers Deployed Fake UpdraftPlus Plugins With Backdoor To Infect WordPress Websites
Once again, hackers have devised a new strategy to infect WordPress websites. This time, researchers have found them exploiting fakeHackers Deployed Fake Updra…
Debian LTS: DLA-1960-1: wordpress security update
Several cross-site scripting (XSS) vulnerabilities were discovered in Wordpress, a popular content management framework. An attacker can use these flaws to sen…
Unpatched Vulnerability In WordPress Plugin “Rich Reviews” Is Under Active Exploit
Almost a month ago, researchers highlighted multiple WordPress plugins that had serious vulnerabilities. Specifically, these plugins had numerous vulnerabiliti…
Hackers are infecting WordPress sites via a defunct plug-in
If youre a WordPress admin using a plug-in called Rich Reviews, you'll want to uninstall it. Now. Learn more:
Top Reasons Why WordPress Sites Get Hacked
According to statistics, WordPress accounted for 90% of hacked CMS sites in 2018. WordPress is a favorite for website owners,Top Reasons Why WordPress Sites Ge…
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites
The malware known as GootLoader has resurfaced yet again after a brief spike in activity earlier this March, according to new findings from Huntress.The cybers…
OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclos…
Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
Every website owner or webmaster grapples with the issue of spam on their website forms. The volume of spam can be so overwhelming that finding useful informat…
Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack
Cybersecurity researchers have unearthed a new ongoingMagecart-style web skimmer campaign that's designed to steal personally identifiable information (PII) an…
New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin
A recently discovered wave of malware attacks has been spotted using a variety of tactics to enslave susceptible machines with easy-to-guess administrative cre…
Fedora 44 Fixes Critical SQL Injection and Remote Code Execution Issue
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
Unpatched Vulnerabilities Exist In RealHome Theme And Plugin
WordPress admins maintaining real estate websites with RealHome Theme and plugin must secure their sites…Unpatched Vulnerabilities Exist In RealHome Theme And …
MUT-1244: The Latest Threat To Your Sensitive Credentials
In recent months, Linux security administrators and WordPress site owners have encountered a formidable adversary: MUT-1244 . This threat actor has been unleas…
GiveWP Plugin Vulnerability Risked 100,000+ Websites To RCE Attacks
A serious code execution vulnerability compromised the security of the GiveWP WordPress plugin, risking thousands…GiveWP Plugin Vulnerability Risked 100,000+ W…
Serious Security Vulnerability Patched In Shield Security WP Plugin
A serious security vulnerability affected the WordPress plugin Security Shield, which could allow arbitrary file…Serious Security Vulnerability Patched In Shie…
Beware: Malicious Google Ads Trick WinSCP Users into Installing Malware
Threat actors are leveraging manipulated search results and bogus Google ads that trick users who are looking to download legitimate software such as WinSCP in…
Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign
Threat actors have been observed serving malicious code by utilizing Binance's Smart Chain (BSC) contracts in what has been described as the "next level of bul…
Jupiter X Core Plugin Flaws Threatened 172K Websites With Account Hijacking
Researchers discovered numerous security flaws in the WordPress plugin Jupiter X Core that allow website…Jupiter X Core Plugin Flaws Threatened 172K Websites W…