10Web Booster Vulnerability: Update and Check Your Site
The 10Web Booster vulnerability shows how an image optimization workflow can expose a security token and enable dangerous file uploads….
arbitrary file upload
Critical WooCommerce Wholesale Lead Capture Vulnerability
A critical WooCommerce Wholesale Lead Capture vulnerability is being actively exploited to upload dangerous files to WordPress servers. Store owners…
Critical Super Forms Vulnerability Is Under Active Attack
A critical Super Forms vulnerability is being actively exploited against WordPress websites. CVE-2026-14894 allows unauthenticated arbitrary file uploads that can…
Critical Elementor Pro Vulnerability Is Under Active Attack
A critical Elementor Pro vulnerability is being actively exploited against WordPress websites using public forms with optional file upload fields….
Gravity Forms Vulnerability Allows Arbitrary File Upload
A high-severity Gravity Forms vulnerability can allow unauthenticated arbitrary file uploads when public forms use multi-file upload fields. CVE-2026-19513 affects…
Critical WPLP Cookie Consent Vulnerability Under Attack
A critical WPLP Cookie Consent vulnerability allows unauthenticated attackers to upload arbitrary files to vulnerable WordPress websites. Site owners running…
Critical Forminator Vulnerability Threatens 600,000 WP Sites
A serious Forminator vulnerability affecting file-upload handling could expose WordPress websites to malicious uploads and possible compromise. Administrators using Forminator…