WPForms Pro Vulnerability: Forms Inject JavaScript
A new WPForms Pro vulnerability allows unauthenticated visitors to store malicious JavaScript through public form fields. Administrators reviewing affected entries…
WordPress plugin security
Critical Automation Web Platform Vulnerability
A critical Automation Web Platform vulnerability tracked as CVE-2026-77264 can expose authentication tokens and allow unauthenticated attackers to access WordPress…
Critical Solace Extra Vulnerability: Update Now
A serious Solace Extra vulnerability can allow unauthenticated attackers to permanently delete WordPress content imported through Starter Templates. Administrators running…
Critical User Profile Builder Flaw Enables Admin Takeover
A critical User Profile Builder vulnerability can allow unauthenticated attackers to access the WordPress account with user ID 1. Learn…
Two WordPress Plugins Put Subscriber Accounts at Risk
Two serious WordPress plugin vulnerabilities show why Subscriber accounts should never be treated as harmless. AcyMailing and Frontend Admin contained…