PPWP PHP Object Injection: What WordPress Admins Should Know
A high-severity PPWP vulnerability affects older versions of the WordPress password protection plugin. CVE-2026-0551 allows authenticated Contributors to inject PHP…
WordPress administrator
Security Hardener Vulnerability Lets Subscribers Become Admins
A high-severity Security Hardener vulnerability can allow authenticated WordPress subscribers to bypass normal REST API permission checks and create administrator…