Events Manager Vulnerability: Subscriber SQL Injection
A serious Events Manager vulnerability allows authenticated WordPress users, including Subscribers, to reach a vulnerable SQL query through REST API…
WordPress security update
WordPress 7.1.3 Security Update: 7 Fixes Explained
The WordPress 7.1.3 security update addresses seven security issues affecting comments, user permissions, WXR exports, and embedded content. Discover how…
Ninja Forms File Uploads Vulnerability: CVE-2026-92820
CVE-2026-92820 affects specific Ninja Forms File Uploads configurations using the external Amazon S3 upload flow. Vulnerable versions through 3.3.34 may…
Simply Schedule Appointments Vulnerability: LFI Risk
A newly disclosed Simply Schedule Appointments vulnerability can allow local file inclusion through the ssa_locale parameter. Although formally classified as…
Kirki XSS: Why Updating Directly to 6.3.0 Is Recommended
A Kirki vulnerability affects versions 6.2.1 through 6.2.5 and can allow unauthenticated attackers to store JavaScript that executes when affected…
Critical ComboBlocks Vulnerability Is Under Active Attack
A reported critical ComboBlocks vulnerability has raised urgent concerns for WordPress administrators. Learn what is currently known about the reported…
Amelia WordPress Vulnerability Allows Admin Takeover
A critical Amelia WordPress vulnerability can allow an unauthenticated attacker to progress from a customer context to Amelia Manager privileges…
Critical Elementor Pro Vulnerability Is Under Active Attack
A critical Elementor Pro vulnerability is being actively exploited against WordPress websites using public forms with optional file upload fields….
Critical WPLP Cookie Consent Vulnerability Under Attack
A critical WPLP Cookie Consent vulnerability allows unauthenticated attackers to upload arbitrary files to vulnerable WordPress websites. Site owners running…
Critical WPMU DEV Dashboard Vulnerability Under Attack
A critical WPMU DEV Dashboard vulnerability can let unauthenticated attackers gain WordPress administrator access when Hub SSO is enabled. Learn…