Critical wp2shell Vulnerability Hits WordPress Core, Patch Released
The wp2shell vulnerability exposed WordPress to unauthenticated RCE. Discover affected versions, patches, risks, and key mitigation steps.
Tag: WordPress
Critical Vulnerability in Advanced Custom Fields: Extended Plugin Puts 100,000 WordPress Sites at Risk
A severe vulnerability in an ACF addon plugin enables unauthorized admin access, exposing thousands of WordPress sites to complete takeover.
WordPress Security Alert: CVE-2025-6043 Enables Remote File Deletion via Malcure Plugin
A high-severity flaw (CVE-2025-6043) in Malcure Malware Scanner lets low-level users delete files, risking remote code execution.
Critical Security Vulnerability Found in WordPress Plugin InstaWP Connect
Moroccan authorities warn of a critical CVE-2025-2636 vulnerability in the InstaWP Connect plugin for WordPress. Update to version 0.1.0.86 to ...
CERT-In Alerts WordPress Users to Critical WPForms Plugin Vulnerability
As 2025 begins, this advisory sets the tone for the year: cybersecurity remains a shared responsibility, one that requires ongoing ...
Critical WPLMS WordPress Theme Vulnerability Puts Websites at Risk of RCE Attacks
A newly discovered vulnerability in the WPLMS WordPress theme threatens websites with potential Remote Code Execution (RCE) due to a ...
Fake WordPress Plugins on 6,000 Sites Prompt Users to Install Malware
More than 6,000 websites have been compromised by fake WordPress plugins in the latest ClickFix campaign.
Critical WPML Plugin Flaw Exposes Millions of WordPress Sites to Remote Code Execution
A critical vulnerability in the WPML plugin has exposed millions of WordPress websites to potential remote code execution attacks.
Top 10 Most Common WordPress Vulnerabilities to Look Out For in 2024
The inclusion of the theming plugin facility further complicates the security challenge as most plugins/themes are often less secure than ...
Alarm Over WordPress Zero-Day Vulnerability: Alleged Exploit Endangers 110,000 Websites
WordPress, a widely used content management system that powers millions of websites around the world, has become a source of ...
Q1 2026 Threat Reports
❮
❯
