Tracked topic
WP Maps Pro bug exploited to create admin accounts on WordPress sites By Bill Toulas May 31, 2026 10:06 AM Hackers are targeting WordPress websites running a vulnerable version of the…
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin By Bill Toulas May 14, 2026 05:07 PM Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst…
…Simple File List (WordPress) – CVE-2025-34085/CVE-2020-36847 WavePlayer (WordPress) – CVE-2025-12057 BerqWP (WordPress) – CVE-2025-7443 WPBookit (WordPress) – CVE-2025-7852 Ninja Forms (WordPress) – CVE-2026-0740 ThemeREX…
Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp By Sergiu Gatlan June 18, 2026 09:25 AM International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress…
…We walk through a remote, multi-stage SQL injection zero-day we discovered in a WordPress plugin with over 300,000 users — fully automated from discovery through exploitation, with no human in…
…ManageWP is a centralized remote administration platform for WordPress websites, enabling users to manage multiple sites from a single panel instead of logging into separate dashboards. Common users include web developers, web…
…SonicWall VPN MFA due to incomplete patching Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin Authentication Bypass Forum Open Source phpBB Vulnerability Bill Toulas Bill Toulas is a tech writer…
…Australian organizations and infrastructure entities are being targeted in attacks that involve compromised WordPress websites that redirect to malicious payloads. Users visiting these websites are shown a fake Cloudflare verification or CAPTCHA…
…in supply-chain attack USB worm spreads crypto-stealing malware via Windows shortcut files OptinMonster WordPress plugin hacked in CDN supply-chain attack Adform Clipper CryptoCurrency Malware Supply Chain Supply Chain Attack…
…Critical wp2shell WordPress flaws exploited to install webshells Australia warns of global campaign targeting vulnerable CMS platforms Ukraine's army targeted in new charity-themed malware campaign ShapedPlugin update flow hacked to…
