CVE-2024-1071: Critical Unauthenticated SQL Injection in Ultimate Member (200,000+ Sites)
CVE-2024-1071 is a critical (CVSS 9.8) unauthenticated SQL injection in the Ultimate Member plugin affecting versions 2.1.3 through…
Blog
CVE-2024-10542: Critical Authorization Bypass in CleanTalk Anti-Spam Plugin Lets Attackers Install Any Plugin (200,000+ Sites)
A critical flaw (CVSS 9.8) in the CleanTalk Anti-Spam plugin let unauthenticated attackers bypass authorization through DNS spoofing…
CVE-2024-2879: Critical Unauthenticated SQL Injection in LayerSlider (1 Million+ Sites)
A critical SQL injection flaw (CVSS 9.8) in the LayerSlider plugin let unauthenticated attackers extract data straight from…
CVE-2024-5932: Critical Unauthenticated RCE in GiveWP Donation Plugin (100,000+ Sites)
GiveWP, the WordPress donation plugin running on 100,000+ sites, had a CVSS 10.0 flaw (CVE-2024-5932) that let unauthenticated…
CVE-2024-25600: Critical Unauthenticated RCE in the Bricks Builder Theme (25,000+ Sites)
A critical flaw (CVSS 9.8) in the Bricks Builder theme let unauthenticated attackers run arbitrary PHP code on…
CVE-2024-10924: Critical Authentication Bypass in Really Simple Security (4 Million+ Sites)
A flaw in Really Simple Security let unauthenticated attackers log in as any user, including administrators, on more…
CVE-2024-28000: Critical Unauthenticated Privilege Escalation in LiteSpeed Cache (5 Million+ Sites)
CVE-2024-28000 is a critical (CVSS 9.8) unauthenticated privilege escalation flaw in LiteSpeed Cache, a plugin on 5,000,000+ WordPress…
CVE-2025-47577: Critical Arbitrary File Upload in TI WooCommerce Wishlist Puts 100,000+ Stores at Risk (CVSS 10.0)
A CVSS 10.0 arbitrary file upload flaw in TI WooCommerce Wishlist let unauthenticated attackers upload PHP files and…
The Day a Plugin Update Took Down 100,000 Sites
A supply chain attack on a popular caching plugin silently compromised over 100,000 WordPress sites in 48 hours.…
WordPress File Permissions: The Complete Security Guide
WordPress file permissions are the foundation of your site’s security. Even the strongest login protection and the most…