plugin

A flaw in the Essential ‘Addons for Elementor’ WordPress plugin poses 1M sites at risk of hackingA flaw in the Essential ‘Addons for Elementor’ WordPress plugin poses 1M sites at risk of hacking

A flaw in the Essential ‘Addons for Elementor’ WordPress plugin poses 1M sites at risk of hacking

Experts warn of an unauthenticated privilege escalation flaw in the popular Essential 'Addons for Elementor' WordPress plugin. Essential 'Addons for…

2 years ago
Over 1 million WordPress sites affected by OptinMonster plugin flawsOver 1 million WordPress sites affected by OptinMonster plugin flaws

Over 1 million WordPress sites affected by OptinMonster plugin flaws

A vulnerability in the popular the OptinMonster plugin allows unauthorized API access and sensitive information disclosure. A high-severity vulnerability (CVE-2021-39341)…

4 years ago
A flaw in The Plus Addons for Elementor WordPress plugin allows sites takeoverA flaw in The Plus Addons for Elementor WordPress plugin allows sites takeover

A flaw in The Plus Addons for Elementor WordPress plugin allows sites takeover

Researchers from the Wordfence team found a critical vulnerability in The Plus Addons for Elementor WordPress plugin that could be…

4 years ago
Critical flaws in Orbit Fox WordPress plugin allows site takeoverCritical flaws in Orbit Fox WordPress plugin allows site takeover

Critical flaws in Orbit Fox WordPress plugin allows site takeover

Two vulnerabilities in the Orbit Fox WordPress plugin, a privilege-escalation issue and a stored XSS bug, can allow site takeover.…

4 years ago
Thousands of WordPress WooCommerce stores potentially exposed to hackThousands of WordPress WooCommerce stores potentially exposed to hack

Thousands of WordPress WooCommerce stores potentially exposed to hack

Hackers are attempting to exploit multiple vulnerabilities in the Discount Rules for WooCommerce WordPress plugin, which has 30,000+ installations. Researchers from security…

5 years ago
Google WordPress Site Kit plugin grants attacker Search Console AccessGoogle WordPress Site Kit plugin grants attacker Search Console Access

Google WordPress Site Kit plugin grants attacker Search Console Access

Experts found a critical bug in Google's official WordPress plugin 'Site Kit' that could allow hackers to gain owner access to…

5 years ago
A critical flaw in Jetpack exposes millions of WordPress sitesA critical flaw in Jetpack exposes millions of WordPress sites

A critical flaw in Jetpack exposes millions of WordPress sites

A critical flaw in the Jetpack WordPress Plugin could be exploited by threat actors to hack WordPress websites running flawed…

5 years ago
Vulnerability in WordPress Live Chat Plugin allows to steal and hijack sessionsVulnerability in WordPress Live Chat Plugin allows to steal and hijack sessions

Vulnerability in WordPress Live Chat Plugin allows to steal and hijack sessions

Security researchers at Alert Logic have discovered a vulnerability in the WordPress Live Chat plugin that could be exploited to steal…

6 years ago
Backdoor in Captcha Plugin poses serious risks to 300K WordPress sitesBackdoor in Captcha Plugin poses serious risks to 300K WordPress sites

Backdoor in Captcha Plugin poses serious risks to 300K WordPress sites

Experts discovered that the popular WordPress Captcha plugin installed on over 300,000 sites was recently updated to deliver a hidden backdoor.…

7 years ago
Experts observed a new wave of wp-vcd malware attacks targeting WordPress sitesExperts observed a new wave of wp-vcd malware attacks targeting WordPress sites

Experts observed a new wave of wp-vcd malware attacks targeting WordPress sites

Experts from the firm Sucuri observed a new wave of wp-vcd malware attacks that is targeting WordPress sites leveraging flaws…

8 years ago