A critical flaw in a WordPress add-on was recently patched, which allows crooks to add a rogue admin account to the site.

A critical security flaw impacting a WordPress plugin known as King Addons for Elementor has come under active exploitation ...

A critical privilege escalation vulnerability has been discovered in the premium WordPress theme Motors, which allows unauthenticated attackers to hijack administrator accounts and take complete ...

Active exploits target Sneeit plugin CVE-2025-6389 and ICTBroadcast CVE-2025-2611, enabling RCE, backdoors, and Frost DDoS ...

A critical authentication bypass vulnerability has been discovered impacting the WordPress plugin 'Really Simple Security' (formerly 'Really Simple SSL'), including both free and Pro versions. Really ...

Hackers and malicious actors are relentless in their attempts to gain access to websites and their sensitive data. The result? We are currently seeing an unprecedented amount of cyber security attacks ...

Threat actors have taken a campaign that uses fake browser updates to spread malware to a new level, weaponizing scores of WordPress plug-ins to deliver malicious infostealing payloads, after using ...

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. WordPress is used by millions of people around the world, including many large organizations, ...