MStore API Vulnerability Allows Firebase JWT Forgery
A serious MStore API vulnerability can allow attackers to forge Firebase authentication tokens and impersonate WordPress users. The flaw highlights…
A serious MStore API vulnerability can allow attackers to forge Firebase authentication tokens and impersonate WordPress users. The flaw highlights…
A reported critical ComboBlocks vulnerability has raised urgent concerns for WordPress administrators. Learn what is currently known about the reported…
A critical Hummingbird vulnerability can turn Page Cache debug logging into a remote code execution risk on affected WordPress sites….
Worried that your WordPress website may have been compromised? Learn how to check for unknown administrators, modified files, malicious plugins,…
A critical ACPT vulnerability can allow unauthenticated attackers to modify existing WordPress user accounts through exposed public forms. Learn which…
A critical Divi Ajax Filter vulnerability can allow unauthenticated attackers to include server-side PHP files when custom loop templates are…
A critical Super Forms vulnerability is being actively exploited against WordPress websites. CVE-2026-14894 allows unauthenticated arbitrary file uploads that can…
A critical Amelia WordPress vulnerability can allow an unauthenticated attacker to progress from a customer context to Amelia Manager privileges…
A critical Elementor Pro vulnerability is being actively exploited against WordPress websites using public forms with optional file upload fields….
A high-severity Gravity Forms vulnerability can allow unauthenticated arbitrary file uploads when public forms use multi-file upload fields. CVE-2026-19513 affects…