Organization
45 Interestana reports mention WordPress, newest first. Each links back to its publisher, with an AI summary of the original reporting where we have found no publisher terms that forbid one.
Hackers are exploiting a security vulnerability in the Gravity SMTP WordPress plugin, which is installed on approximately 100,000 websites. The flaw, identified as CVE-2026-4020 with a CVSS score of 5.3, is a medium-severity information disclosure issue.
Dutch law enforcement, in collaboration with Canadian, German, and U.S. authorities, disrupted malicious infrastructure linked to SocGholish and cleaned approximately 14,971 compromised WordPress websites this week. Maikel Rollman of the Netherlands National High Tech Crime Unit stated that these actions…
Attackers tampered with JavaScript files for popular WordPress plugins PushEngage, OptinMonster, and TrustPulse, introducing hidden backdoors into websites. The malicious code was designed to execute when a site administrator was logged in and the compromised file loaded.
MonsterInsights, a popular WordPress plugin, had its website compromised on March 12, 2024, leading to the distribution of phishing emails. The company took its website offline to prevent further malicious activity and issued a warning to its users.
A critical vulnerability in the UpdraftPlus WordPress plugin was disclosed on March 11, 2024, potentially exposing over 3 million websites to severe security risks. The flaw, identified as CVE-2024-27774, allows unauthenticated attackers to execute arbitrary code on affected WordPress installations.