BoldGrid Builder XSS Vulnerability: Update Now
A high-severity XSS vulnerability affects BoldGrid Post and Page Builder versions 1.27.14 and earlier. CVE-2026-100510 does not require attacker authentication,…
WordPress plugin vulnerability
Ninja Forms File Uploads Vulnerability: CVE-2026-92820
CVE-2026-92820 affects specific Ninja Forms File Uploads configurations using the external Amazon S3 upload flow. Vulnerable versions through 3.3.34 may…
WPMobile.App Flaw Allows Admin Account Takeover
A critical WPMobile.App vulnerability tracked as CVE-2026-94541 can expose WordPress password-reset URLs and enable administrator account takeover. Sites running version…
Amelia WordPress Vulnerability Allows Admin Takeover
A critical Amelia WordPress vulnerability can allow an unauthenticated attacker to progress from a customer context to Amelia Manager privileges…
Critical ASE Pro Vulnerability: Update Immediately
A critical vulnerability in ASE Pro allows unauthenticated attackers to execute PHP code on exposed WordPress sites. Learn which versions…