wordpress

WordPress Plugin Vulnerability Exposes 7 Million Sites to XSS Attack

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular LiteSpeed Cache plugin for WordPress, affecting millions of…

10 months ago

Hackers Exploit Litespeed Plugin Flaw To Create Rogue Admin Accounts

WordPress plugins make WordPress more useful, but most have flaws that hackers may try to exploit to get unauthorized entry…

2 years ago

WordPress Responsive Theme Flaw Let Attackers Inject Malicious HTML Scripts

A vulnerability was identified in the WordPress theme, "Responsive," allowing attackers to inject arbitrary HTML content into websites. This flaw,…

2 years ago

Critical Vulnerability in WordPress Stripe Payment Plugin Exposes Customer Data

The Wordpress Stripe Payment Gateway plugin has been vulnerable to Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability. WooCommerce developed this…

3 years ago

Hackers Use Abandoned WordPress Plugins to Backdoor Websites

Threat actors have discovered a new technique to insert malicious codeĀ into websites. They are currently utilizing Eval PHP, an abandoned…

3 years ago

Balada Injector – Massive Ongoing WordPress Malware Infected Over 1 Million Websites

A cyber attack campaign targeting WordPress websites has recently caused significant concern, with experts estimating that up to one million…

3 years ago

Jetpack Plugin With 5 Million Active Installation Suffered A Security Flaw

Jetpack is a plugin suite that combines essential WordPress features into one large plugin. It provides free security, performance, marketing,…

5 years ago

Critical Vulnerability in Google Plugin Let Hackers Gain Access to Vulnerable Site’s Google Search Console

Researchers discovered a critical vulnerability in Google's official WordPress plugin "Site Kit by Google that simply allows any verified user,…

6 years ago

Critical Bugs In Two WordPress Plugin Let Hackers Gain Access To 1 Million Sites

Recently, the Wordfence Threat Intelligence team observed that hackers are exploiting two vulnerabilities in two WordPress Plugins, Elementor Pro and…

6 years ago