An Anonymous Comment Can Hand Duplicator a Payload That Fires at Migration Time, and Under a Third of Free Installs Run the Fix
Wordfence says CVE-2026-82814 lets an anonymous comment plant a...
Browse Tag
Wordfence
11 Articles
Some Rank Math PRO 3.0.123 Downloads Carried Malware for 11 Hours, and Updating Will Not Clean an Infected Site
Rank Math says PRO 3.0.123 copies downloaded in an 11-hour...
Wordfence’s AI Finds a Ghostscript Flaw Rated 9.8 in the CVE and Moderate by Red Hat
Wordfence disclosed a Ghostscript heap overflow that Artifex...
Two Vulnerability Chains in The Events Calendar Let an Anonymous Comment Trigger Full Site Takeover
Two independent vulnerability chains in a WordPress calendar...
WPMU DEV Dashboard Patches a Second Critical Authentication Bypass in Three Weeks
A critical, now-patched flaw in WPMU DEV Dashboard let...
Wordfence Weekly Report Adds 199 WordPress Vulnerabilities
Wordfence’s June 22–28 weekly report says 199 WordPress plugin...
Wordfence Report Tallies 102 WordPress Vulnerabilities in One Week
Wordfence says 102 WordPress plugin and theme vulnerabilities...
Wordfence Says Avada Builder Flaw Could Delete WordPress Files
Wordfence says a critical Avada Builder flaw can let...
Wordfence Says Gravity SMTP Flaw Is Being Actively Exploited
Wordfence says attackers are exploiting CVE-2026-4020 in Gravity...
Wordfence Says ShapedPlugin Pro Updates Carried Backdoors
Wordfence says ShapedPlugin Pro plugin updates were distributed...