Tech Times on MSN

Attackers exploit WordPress SSO plugin; six paid editions were never in any vulnerability database

WordPress SAML SSO vulnerability in the miniOrange plugin is being actively exploited -- attackers can log in as any WordPress administrator with no credentials. Enterprise sites running paid editions ...
Tech Times on MSN

WordPress backup plugin flaw: 3.25 million sites exposed, exploit code active

WordPress backup plugin vulnerability CVE-2026-19949 in All-in-One WP Migration exposes 3.25 million unpatched sites to unauthenticated remote code execution, with a weaponized proof-of-concept ...
ZDNet

WordPress plugin vulnerability can be exploited for total website takeover

A WordPress plugin has been found to contain "easily exploitable" security issues that can be exploited to completely take over vulnerable websites. The plugin at the heart of the matter, WP Database ...
BleepingComputer

Hackers target WordPress database plugin active on 1 million sites

Malicious activity targeting a critical severity flaw in the ‘Better Search Replace’ WordPress plugin has been detected, with researchers observing thousands of attempts in the past 24 hours. Better ...
Threatpost

WPScan Vulnerability Database a New WordPress Security Resource

Researcher Ryan Dewhurst released the WPScan Vulnerability Database, a database housing security vulnerabilities in WordPress core code, plug-ins and themes. It’s available for pen-testers, WordPress ...
BleepingComputer

WP Fastest Cache plugin bug exposes 600K WordPress sites to attacks

The WordPress plugin WP Fastest Cache is vulnerable to an SQL injection vulnerability that could allow unauthenticated attackers to read the contents of the site’s database. WP Fastest Cache is a ...