Do Son
At a Glance Attribute Details Actor or Group Suspected Chinese cyber actor (associated with Red Heron) Activity...
wordpress security
The week in numbers CVE WATCHTOWER logged 4,378 new vulnerabilities between September 14 and September 20, 2026....
TL;DR Attackers are exploiting CVE-2026-14894 in the wild. This critical Super Forms vulnerability lets unauthenticated users upload...
TL;DR A critical flaw in TranslatePress lets unauthenticated attackers steal an administrator’s password reset link. Attackers can...
At a glance Actor / group Unnamed operator behind “StopAndProtect” (internal project names “0a_botnet” and “fake-captcha”) Activity...
TL;DR: A critical User Profile Builder vulnerability, carrying a maximum CVSS score of 9.8 and tracked as...
At a Glance Malware family API-driven XSS supply chain implant (Biggopti banner abuse) Threat actor Suspected; linked...
The CVE WATCHTOWER logged 2,077 new vulnerabilities between July 27 and August 2, 2026. This CVE weekly...
Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug...
Hundreds of WordPress sites remain easy targets year after year. The cause is rarely a rare zero-day...
At a Glance Actor / group SocGholish operator (TA569), linked to Russia’s Evil Corp; Amadey and StealC...
An Unconventional Command Network Emerges Cybersecurity defenders recently uncovered a highly unusual cyber espionage operation targeting website...
Recently, a major security threat emerged within the WordPress ecosystem. Attackers are actively targeting a critical flaw...
In a major discovery for the WordPress ecosystem, PRISM, Wordfence Threat Intelligence’s autonomous vulnerability research platform, has...
In the world of Linux server operations and virtual hosting management, cPanel & WHM is a cornerstone...
A security vulnerability has been identified in Temporary Login, a popular WordPress plugin designed to provide secure,...
Welcome to your Monday morning vulnerability digest. As we close out the final full week of April,...
A major security threat is currently sweeping through the WordPress ecosystem. Breeze, a highly popular caching plugin...
Everest Forms, a popular WordPress plugin trusted by over 100,000 websites for building everything from simple contact...
In a major alert for the WordPress community, a critical security flaw has been disclosed in the...
Whether you are steering the organizational ship as a CISO or maintaining the operational engines as a...
The attackers begin actively exploiting a critical vulnerability in Kali Forms, a popular drag-and-drop form builder WordPress...