The Ally WordPress plugin suffered from an SQL injection vulnerability (CVE-2026-2413) Approximately 246,600 sites were left vulnerable to information theft Corrected in version 4.1.0; WordPress …
Cyber-Criminal Campaign Compromises WordPress Sites to Deploy Infostealer Malware A significant cyber-criminal initiative has infiltrated legitimate WordPress websites, resulting in the infection of unsuspecting visitors …
Critical Vulnerability in WordPress Plugin Poses Major Security Risk A significant security vulnerability has been uncovered in a widely used WordPress plugin, exploiting an unchecked …
WPvivid Backup & Migration Plugin Exposed to Severe RCE Vulnerability CVE-2026-1357 WPvivid Backup & Migration, a widely-utilized WordPress plugin boasting nearly one million installations, has …
An SQL Injection Vulnerability Identified in QSM Plugin If your website employs the Quiz and Survey Master (QSM) WordPress plugin, it is imperative to update …
Over 40,000 WordPress sites utilizing the Quiz and Survey Master (QSM) plugin have fallen prey to an SQL injection vulnerability, which empowered authenticated users to …
Critical Security Vulnerability in RealHomes CRM Plugin Rectified A significant security vulnerability within the RealHomes CRM plugin, a component bundled with a WordPress theme utilised …
Critical Vulnerability Exposes Real Estate Websites to Exploitation A significant vulnerability in the RealHomes CRM plugin for WordPress has compromised over 30,000 real estate websites, …
Severe Vulnerability Discovered in ACF Extended Plugin for WordPress A critical vulnerability has been identified within the Advanced Custom Fields: Extended (ACF Extended) plugin, enabling …
For operators of WordPress sites, a pressing matter has emerged that warrants immediate scrutiny. A popular plugin has been compromised, effectively transforming it into a …
