Do Son Hackers are actively exploiting a 9.8 CVSS RCE flaw in Kali Forms (CVE-2026-3584). Over 10,000 WordPress sites are at risk. Update to version 2.4.10 now!
Website Security
A critical 9.8 CVSS flaw (CVE-2026-1492) in the WordPress User Registration & Membership plugin lets unauthenticated attackers create admin accounts.
A critical vulnerability in HubSpot’s Jinjava template engine (CVE-2025-59340) could lead to remote code execution. Patch immediately to secure your site.
A critical 9.8-rated vulnerability in the popular "Database for Contact Form 7" plugin could let unauthenticated attackers delete files and gain full control of sites.
A critical privilege escalation flaw (CVE-2025-4601) in RealHomes WordPress theme allows low-privilege users to become admins. Update now!
Wordfence uncovers a sophisticated WordPress malware disguised as a legitimate plugin, stealing admin credentials & enabling remote code execution.
Critical vulnerability (CVSS 9.8) in the Motors WordPress theme! This flaw puts over 22,000 websites at risk of full takeover. Update now!
A WordPress vulnerability puts private information at risk for nearly a billion websites. Can your site's draft titles be stolen?
Over 10,000 WordPress sites at risk from Eventin plugin flaw CVE-2025-47539. Attackers can gain admin access via unauthenticated API exploit.
Wordfence warns of malware posing as a WordPress plugin that enables admin access, hides itself, and executes remote code via REST API and cron jobs.
Sucuri discovered a credit card skimming attack using a fake font domain to steal credit card data from a WordPress website.
Joomla has released security patches for critical SQL injection (CVE-2025-25226) and MFA bypass (CVE-2025-25227) vulnerabilities. Learn how to protect your Joomla site with urgent updates.