Organization
45 Interestana reports mention WordPress, newest first. Each links back to its publisher, with an AI summary of the original reporting where we have found no publisher terms that forbid one.
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild. The critical vulnerability allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable websites.
Cybersecurity researchers identified an AI-augmented campaign by CyberXero targeting Ukrainian WordPress sites and critical infrastructure. The attackers used Cobalt Strike alongside Anthropic's Claude Code to steal more than 628,000 records from various platforms.
WordPress 7.1.3, released on March 11, 2024, addresses a total of eight security issues, including seven reported vulnerabilities and one critical flaw. This update is crucial for maintaining the security and stability of websites built on the WordPress platform…
Cybersecurity researchers have detailed a sophisticated WordPress backdoor, codenamed SC, that utilizes multiple persistence mechanisms to ensure its survival and self-regeneration after attempted cleanups. This advanced malware, identified by "SC_" markers within injected content, has been described by Sucuri…
A significant security vulnerability has been detailed within the Elementor Website Builder WordPress plugin, a widely used tool for website design. This flaw, identified as a high-severity cross-site request forgery (CSRF) vulnerability, could enable an unauthenticated attacker to gain complete…
Threat actors have commenced active exploitation of a critical security flaw within the WordPress content management system, with exploitation beginning mere hours after its public disclosure. The vulnerability, identified as CVE-2026-87902, carries a high severity rating with a CVSS score…
WordPress released version 7.1.2 on September 22, 2023, to address a critical security vulnerability within its core software. This flaw, identified as allowing an unauthenticated attacker to load a PHP file from outside a theme's designated folders, posed a significant…
WordPress core has addressed a critical vulnerability, tracked as CVE-2026-93485 and nicknamed "Comment2Shell," which enabled anonymous users to achieve remote code execution (RCE) by exploiting administrator sessions. The flaw, fixed on September 17 in WordPress version 7.1.1, allowed an unauthenticated…
WordPress has released patches to address a critical vulnerability within its core software, identified as Click2Shell, which could permit an attacker to install themes from the official WordPress.org directory without requiring user interaction beyond opening a specially crafted web link.
WordPress has introduced an automated security review process for every plugin update before it is distributed via the WordPress.org update API. This new system aims to analyze plugins for potential security vulnerabilities and ensure that no high-risk updates are released…