The WordPress WP HTML Mail plugin for personalized emails is vulnerable to code injection and phishing due to XSS. More than 20,000 WordPress sites are vulnerable to malicious code injection, phishing ...
Security vulnerabilities with critical risk ratings are present in widespread WordPress plugins. One is already being attacked.
A critical WordPress Modular DS plugin flaw (CVE-2026-23550) allows unauthenticated attackers to gain admin access; patched ...
An advisory was issued for a WordPress plugin vulnerability that can enable unauthenticated attackers to inject malicious ...
A vulnerability in the AIOSEO plugin affecting up to 3 million installations adds to the six vulnerabilities found in 2025.
Security researchers confirmed in-the-wild exploitations of the mx-severity flaw, allowing unauthenticated actors gain full ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results