WordPress Easy WP SMTP Plugin Vulnerability
Popular WordPress plugin with over 500,000 active installations was recently patched to fix an exploit that grants hackers complete control.
WordPress Ultimate Member Plugin Vulnerability
Ultimate Member WordPress plugin issued a patch for three critical and severe exploits that grant attackers total control of a site.
Loginizer WordPress Vulnerability Affects +1 Million Sites
Popular WordPress security plugin Loginizer patched two security issues, including a SQL Injection.
WP Bakery WordPress Vulnerability Affects Millions of Sites
WP Bakery Page Builder WordPress plugin vulnerability affects over 4 million sites.
Divi WordPress Theme Vulnerability
Critical vulnerability discovered in Elegant Themes Divi and Extra Themes as well as in the Divi Builder WordPress plugin.
All in One SEO Pack Vulnerability – New Exploit
Researchers discovered a vulnerability in All in One SEO Pack. Exploit could allow a total takeover of a WordPress website.
Google Site Kit WordPress Plugin Vulnerability
Critical vulnerability discovered in Google Site Kit WordPress plugin.
Elementor Pro Critical Vulnerability
Critical vulnerabilities in Elementor Pro allows hacker control of website
Ninja Forms Plugin Vulnerability
Ninja Forms WordPress Plugin patches a high severity vulnerability.
Critical Vulnerability in Rank Math SEO Plugin
A critical vulnerability was discovered in Rank Math SEO Plugin that allows an attacker to escalate privileges.
Elementor Page Builder Plugin Vulnerability
Elementor WordPress Page Builder contains a vulnerability.
WPS Hide Login Updated to Fix Vulnerability
WPS Hide Login contains a vulnerability that can cause it to reveal the secret admin login page.
WordPress Divi Theme Code Injection Vulnerability
Elegant Themes announced a code injection vulnerability. Update now to protect against it.
Critical Vulnerability Strikes WordPress Ad Inserter
Ad Inserter WordPress plugin was discovered to have a critical vulnerability. Ad Inserter immediately fixed the issue. Users are recommended to update their plugin.
Web Host Vulnerability Discovered at iPage, FatCow, PowWeb, and NetFirm
A vulnerability was discovered and patched at four popular web hosts. Customers are urged to scan for malware.
Vulnerability Reported in All in One SEO Pack
WPScan Vulnerability Database reports that the All in One SEO Pack plugin has a cross-site scripting vulnerability.
Critical Drupal Core Vulnerability – Upgrade Now
Drupal.org announced a critical core vulnerability that allows attackers to exploit multiple attack vectors on a site. Full details on what to do next.
Millions of WordPress Websites Affected By Plugin Vulnerability
Web security firm Sucuri has reported on the discovery of a WordPress plugin vulnerability affecting any site that uses the genericons package. At this time,...
Vulnerability Found in Latest Versions of WordPress, Patch Now Available
A new comment XSS exploit vulnerability, being called “Zero Day”, has been found in the latest versions of WordPress: 4.2, 4.1.2, 4.1.1, and 3.9.3. The...
Critical Vulnerability Found In Popular WordPress Newsletter Plugin
Web security firm, Sucuri, found a critical vulnerability in a WordPress plug-in that has over 1.7 million downloads. The vulnerability allows potential attackers to take...