Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 WordPress 6.9.9 Security Advisory RCE CVE-2026-87902
WordPress 6.9.9 Security Release Security updates included in this release Unauthenticated path traversal in page-template resolution leading to conditional RC…
Fedora WordPress Critical Path Traversal RCE Vuln 2026-7f9c69a63c
WordPress 6.9.9 Security Release Security updates included in this release Unauthenticated path traversal in page-template resolution leading to conditional RC…
Debian WordPress Remote Code Execution and Escalation Flaw DSA-6525-1
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could result in cross-site scripting, privilege escalation or remote code exec…
Critical Remote Code Execution Vulnerability in Fedora WordPress 6.9.7
Fedora has released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution and stored cross-site scripting issu…
Fedora 43 WordPress 6.9.7 Authenticated RCE Update 2026-61704c09ea
Fedora released WordPress version 6.9.7, addressing multiple security vulnerabilities, including remote code execution, various XSS issues, privilege escalatio…
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to ach…
Fedora 43 Wordpress Critical SQL Injection RCE Vuln 2026-46346e9637
Fedora 43 has released WordPress version 6.9.5, addressing security vulnerabilities including SQL injection and remote code execution issues. Users can update …
wp2shell: WordPress Patches a Pre-Auth RCE That Needed No Plugins
WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and SQL injection into unauthenticated remote code execution.wp2shell: Wor…
Debian WordPress Critical SQL Injection Threat DSA-6399-1 CVE-2026-60137
A SQL injection vulnerability was found in WordPress, prompting an important update to version 6.8.6+dfsg1-0+deb13u1 for the stable Debian distribution.
Debian Trixie WordPress Security Advisory DSA-6091-1 for CVE-2025-58246
Multiple security issues were discovered in the WordPress blogging tool, which could result in cross-site scripting or information disclosure. For the stable d…
WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts
A critical security flaw impacting a WordPress plugin known as King Addons for Elementor has come under active exploitation in the wild.The vulnerability, CVE-…
Debian 11: WordPress Critical XSS Issues DLA-4358-1 CVE-2024-6307
Several security vulnerabilities have been discovered in Wordpress, a popular content management framework. CVE-2024-6307
Fedora 41: WordPress 6.8.3 Critical Data Leak & XSS Vulnerability Alert
WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content. Indepe…
ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners
A new large-scale campaign has been observed exploiting over 100 compromised WordPress sites to direct site visitors to fake CAPTCHA verification pages that em…
Post SMTP Plugin Flaw Risked 400K+ WordPress Sites To Hijacking
WordPress admins need to update their websites with the latest Post SMTP plugin release, as…Post SMTP Plugin Flaw Risked 400K+ WordPress Sites To Hijacking on …
Linux Foundation Announces FAIR Package Manager for WordPress Stability
Alright, Linux admins and security pros, let's talk WordPress . I know''typically, "WordPress" doesn't top the list of thrilling topics in our corner of the te…
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin
Cybersecurity researchers have disclosed a critical unpatched security flaw impacting TI WooCommerce Wishlist plugin for WordPress that could be exploited by u…
Containerizing WordPress: Best Practices for Robust Security and Management
Keeping WordPress secure can be challenging, especially when considering Linux security concerns in a typical LAMP stack setup. Most WordPress security issues …
390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits
A now-removed GitHub repository that advertised a WordPress tool to publish posts to the online content management system (CMS) is estimated to have enabled th…
Anti-Spam WordPress Plugin Vulnerabilities Risked 200K+ Websites
Multiple critical vulnerabilities existed in the WordPress plugin Spam protection, Anti-Spam, FireWall. Exploiting these vulnerabilities…Anti-Spam WordPress Pl…
Really Simple Security Plugin Flaw Risks 4+ Million WordPress Websites
Heads up, WordPress admins! The WordPress plugin Really Simple Security had a serious security flaw.…Really Simple Security Plugin Flaw Risks 4+ Million WordPr…
Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites
A critical authentication bypass vulnerability has been disclosed in the Really Simple Security (formerly Really Simple SSL) plugin for WordPress that, if succ…
LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites
A high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could allow an unauthenticated threat actor to elevate their …
Critical Vulnerability Patched In Jetpack WordPress Plugin
Heads up, WordPress admins! It’s time to update your websites with the latest Jetpack release…Critical Vulnerability Patched In Jetpack WordPress Plugin on Lat…