#pluginvulnerability — Public Fediverse posts

BdThemes plugins compromised in supply-chain attack

A stealthy supply-chain attack on BdThemes plugins has turned into a high-stakes problem, putting over 350,000 active WordPress installations at risk. The breach affects popular plugins like Element Pack, Prime Slider, and others, prompting the WordPress Plugins team to swiftly pull them from download.

https://osintsights.com/bdthemes-plugins-compromised-in-supply-chain-attack?utm_source=mastodon&utm_medium=social

#SupplyChain #Wordpress #PluginVulnerability #EmergingThreats #Bdthemes

Hackers Exploit Gravity SMTP Plugin Bug on 100,000 WordPress Sites

A critical bug in the Gravity SMTP plugin is being exploited by hackers on over 100,000 WordPress sites, putting sensitive information at risk. Update to version 2.1.5 or later to patch the vulnerability.

https://osintsights.com/hackers-exploit-gravity-smtp-plugin-bug-on-100000-wordpress-sites?utm_source=mastodon&utm_medium=social

#Wordpress #Smtp #GravitySmtp #Cve20264020 #PluginVulnerability

Hackers Exploit Everest Forms Pro Flaw to Hijack WordPress Sites

More than 29,300 attempted hacks have been blocked by Wordfence, revealing a surge in automated attacks exploiting a critical flaw in the Everest Forms Pro plugin, tracked as CVE-2026-3300. This alarming number highlights the urgent need for WordPress site owners to safeguard against this vulnerability.

https://osintsights.com/hackers-exploit-everest-forms-pro-flaw-to-hijack-wordpress-sites?utm_source=mastodon&utm_medium=social

#Cve20263300 #Wordpress #EverestFormsPro #PluginVulnerability #MalwareOperations

Hackers Exploit Everest Forms Pro Flaw to Hijack WordPress Sites

More than 29,300 attempted hacks have been blocked by Wordfence, revealing a surge in automated attacks exploiting a critical flaw in the Everest Forms Pro plugin, tracked as CVE-2026-3300. This alarming number highlights the urgent need for WordPress site owners to safeguard against this vulnerability.

https://osintsights.com/hackers-exploit-everest-forms-pro-flaw-to-hijack-wordpress-sites?utm_source=mastodon&utm_medium=social

#Cve20263300 #Wordpress #EverestFormsPro #PluginVulnerability #MalwareOperations

Hackers Exploit Everest Forms Pro Flaw to Compromise WordPress Sites

A critical vulnerability in Everest Forms Pro, affecting over 4,000 active WordPress installations, has been exploited by hackers to gain remote code execution, allowing them to take control of sites without authorization. A patch has been released, but sites remain at risk if not updated to version 1.9.13 or later.

https://osintsights.com/hackers-exploit-everest-forms-pro-flaw-to-compromise-wordpress-sites?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Cve20263300 #EverestFormsPro #Wordpress #PluginVulnerability

Hackers Exploit Everest Forms Pro Flaw to Compromise WordPress Sites

A critical vulnerability in Everest Forms Pro, affecting over 4,000 active WordPress installations, has been exploited by hackers to gain remote code execution, allowing them to take control of sites without authorization. A patch has been released, but sites remain at risk if not updated to version 1.9.13 or later.

https://osintsights.com/hackers-exploit-everest-forms-pro-flaw-to-compromise-wordpress-sites?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Cve20263300 #EverestFormsPro #Wordpress #PluginVulnerability

Everest Forms Pro Flaw Exploited for Remote Code Execution

A critical flaw in the Everest Forms Pro WordPress plugin, CVE-2026-3300, has been exploited over 29,300 times, allowing attackers to execute remote code on vulnerable sites. This vulnerability was caused by a simple calculation feature that was not properly sanitized, leaving sites open to unauthenticated attacks.

https://osintsights.com/everest-forms-pro-flaw-exploited-for-remote-code-execution?utm_source=mastodon&utm_medium=social

#RemoteCodeExecution #Cve20263300 #Wordpress #EverestFormsPro #PluginVulnerability

WP Maps Pro Flaw Exploited to Create Admin Accounts

A critical vulnerability in the popular WP Maps Pro plugin, used by over 15,000 WordPress sites, has been exploited to create admin accounts, putting countless websites at risk of complete takeover. This high-severity flaw, tracked as CVE-2026-8732, allows attackers to escalate privileges and gain unrestricted access.

https://osintsights.com/wp-maps-pro-flaw-exploited-to-create-admin-accounts?utm_source=mastodon&utm_medium=social

#Wordpress #WpMapsPro #Cve20268732 #PrivilegeEscalation #PluginVulnerability

WP Maps Pro Flaw Exploited to Create Admin Accounts

A critical vulnerability in the popular WP Maps Pro plugin, used by over 15,000 WordPress sites, has been exploited to create admin accounts, putting countless websites at risk of complete takeover. This high-severity flaw, tracked as CVE-2026-8732, allows attackers to escalate privileges and gain unrestricted access.

https://osintsights.com/wp-maps-pro-flaw-exploited-to-create-admin-accounts?utm_source=mastodon&utm_medium=social

#Wordpress #WpMapsPro #Cve20268732 #PrivilegeEscalation #PluginVulnerability

WP Maps Pro Flaw Exploited to Create Admin Accounts

A critical vulnerability in the popular WP Maps Pro plugin, used by over 15,000 WordPress sites, has been exploited to create admin accounts, putting countless websites at risk of complete takeover. This high-severity flaw, tracked as CVE-2026-8732, allows attackers to escalate privileges and gain unrestricted access.

https://osintsights.com/wp-maps-pro-flaw-exploited-to-create-admin-accounts?utm_source=mastodon&utm_medium=social

#Wordpress #WpMapsPro #Cve20268732 #PrivilegeEscalation #PluginVulnerability

Hackers Exploit WP Maps Pro Bug to Hijack WordPress Sites

In just 24 hours, over 3,600 hacking attempts were made to exploit a critical flaw in the WP Maps Pro plugin, allowing attackers to create admin accounts and log in without a password. This vulnerability, affecting version 6.1.0 and older, puts countless WordPress sites at risk.

https://osintsights.com/hackers-exploit-wp-maps-pro-bug-to-hijack-wordpress-sites?utm_source=mastodon&utm_medium=social

#Wordpress #WpMapsPro #Cve20268732 #PluginVulnerability #EmergingThreats

LiteSpeed Plugin Flaw Exploited to Run Scripts as Root

A critical flaw in the LiteSpeed plugin, CVE-2026-48172, is being actively exploited to give cPanel users unlimited power, allowing them to run scripts as root. This severe vulnerability, rated 10.0 on the CVSS scale, puts your online security at risk and demands immediate attention.

https://osintsights.com/litespeed-plugin-flaw-exploited-to-run-scripts-as-root?utm_source=mastodon&utm_medium=social

#Cve202648172 #Litespeed #PluginVulnerability #Cpanel #EmergingThreats

LiteSpeed Plugin Flaw Exploited to Run Scripts as Root

A critical flaw in the LiteSpeed plugin, CVE-2026-48172, is being actively exploited to give cPanel users unlimited power, allowing them to run scripts as root. This severe vulnerability, rated 10.0 on the CVSS scale, puts your online security at risk and demands immediate attention.

https://osintsights.com/litespeed-plugin-flaw-exploited-to-run-scripts-as-root?utm_source=mastodon&utm_medium=social

#Cve202648172 #Litespeed #PluginVulnerability #Cpanel #EmergingThreats

Hackers exploit auth flaw in Burst Statistics WordPress plugin

A critical bug in the Burst Statistics WordPress plugin, affecting 200,000 sites, allows hackers to impersonate administrators and gain unauthorized access. This alarming vulnerability, already showing signs of exploitation, puts countless websites at risk.

https://osintsights.com/hackers-exploit-auth-flaw-in-burst-statistics-wordpress-plugin?utm_source=mastodon&utm_medium=social

#Wordpress #Cve20268181 #AuthenticationBypass #Vulnerability #PluginVulnerability

Hackers exploit auth flaw in Burst Statistics WordPress plugin

A critical bug in the Burst Statistics WordPress plugin, affecting 200,000 sites, allows hackers to impersonate administrators and gain unauthorized access. This alarming vulnerability, already showing signs of exploitation, puts countless websites at risk.

https://osintsights.com/hackers-exploit-auth-flaw-in-burst-statistics-wordpress-plugin?utm_source=mastodon&utm_medium=social

#Wordpress #Cve20268181 #AuthenticationBypass #Vulnerability #PluginVulnerability

Hackers exploit auth flaw in Burst Statistics WordPress plugin

A critical bug in the Burst Statistics WordPress plugin, affecting 200,000 sites, allows hackers to impersonate administrators and gain unauthorized access. This alarming vulnerability, already showing signs of exploitation, puts countless websites at risk.

https://osintsights.com/hackers-exploit-auth-flaw-in-burst-statistics-wordpress-plugin?utm_source=mastodon&utm_medium=social

#Wordpress #Cve20268181 #AuthenticationBypass #Vulnerability #PluginVulnerability

Checkmarx Plugin Sabotaged in Fresh TeamPCP Intrusion

Checkmarx issued a warning on May 9, 2026, that a tampered version of its Jenkins AST plugin had been released on the Jenkins Marketplace, posing a risk to continuous-integration pipelines. The company quickly responded by urging customers to update to a trusted version, 2.0.13-829.vc72453fa_1c16, to safeguard their systems.

https://osintsights.com/checkmarx-plugin-sabotaged-in-fresh-teampcp-intrusion?utm_source=mastodon&utm_medium=social

#Jenkins #Checkmarx #SupplyChain #PluginVulnerability #EmergingThreats

WordPress Plugin Exposes 70,000 Sites to Backdoor Vulnerability

A shocking security vulnerability has been uncovered in a popular WordPress plugin, leaving over 70,000 sites open to backdoor attacks that can inject malicious code on demand. The issue was discovered in the Quick Page/Post Redirect plugin, which was infected with a hidden backdoor five years ago.

https://osintsights.com/wordpress-plugin-exposes-70000-sites-to-backdoor-vulnerability?utm_source=mastodon&utm_medium=social

#Wordpress #BackdoorVulnerability #PluginVulnerability #EmergingThreats #WebApplicationSecurity

WordPress Plugin Exposes 70,000 Sites to Backdoor Vulnerability

A shocking security vulnerability has been uncovered in a popular WordPress plugin, leaving over 70,000 sites open to backdoor attacks that can inject malicious code on demand. The issue was discovered in the Quick Page/Post Redirect plugin, which was infected with a hidden backdoor five years ago.

https://osintsights.com/wordpress-plugin-exposes-70000-sites-to-backdoor-vulnerability?utm_source=mastodon&utm_medium=social

#Wordpress #BackdoorVulnerability #PluginVulnerability #EmergingThreats #WebApplicationSecurity

Compromised Plugin Update Injects Backdoor into WordPress Sites

A widely used WordPress plugin, Smart Slider 3 Pro, was compromised when hackers hijacked its update system to push a poisoned version containing a backdoor, putting over 800,000 active installations at risk. This alarming breach raises critical questions about trust and security in the mechanisms we rely on to protect our online…

https://osintsights.com/compromised-plugin-update-injects-backdoor-into-wordpress-sites?utm_source=mastodon&utm_medium=social

#Wordpress #SupplyChain #PluginVulnerability #Backdoor #EmergingThreats

Imagine a tiny glitch in a trusted WordPress security tool handing out the keys to your site. One overlooked detail led to a major breach—proof that even small flaws can have huge consequences. Dive in to see how this happened.

https://thedefendopsdiaries.com/how-a-minor-wordpress-plugin-flaw-became-a-major-security-threat/

#wordpresssecurity
#pluginvulnerability
#cyberthreats
#infosec
#websecurity

Imagine a tiny glitch in a trusted WordPress security tool handing out the keys to your site. One overlooked detail led to a major breach—proof that even small flaws can have huge consequences. Dive in to see how this happened.

https://thedefendopsdiaries.com/how-a-minor-wordpress-plugin-flaw-became-a-major-security-threat/

#wordpresssecurity
#pluginvulnerability
#cyberthreats
#infosec
#websecurity

Imagine a tiny glitch in a trusted WordPress security tool handing out the keys to your site. One overlooked detail led to a major breach—proof that even small flaws can have huge consequences. Dive in to see how this happened.

https://thedefendopsdiaries.com/how-a-minor-wordpress-plugin-flaw-became-a-major-security-threat/

#wordpresssecurity
#pluginvulnerability
#cyberthreats
#infosec
#websecurity

Imagine a tiny glitch in a trusted WordPress security tool handing out the keys to your site. One overlooked detail led to a major breach—proof that even small flaws can have huge consequences. Dive in to see how this happened.

https://thedefendopsdiaries.com/how-a-minor-wordpress-plugin-flaw-became-a-major-security-threat/

#wordpresssecurity
#pluginvulnerability
#cyberthreats
#infosec
#websecurity

WordPress LiteSpeed Cache Plugin Vulnerability Gives Hackers Admin Control
Are you a WordPress user who relies on the LiteSpeed Cache plugin to keep your site running smoothly and efficiently? Well, you might want to pay attention to this latest development.
#WordPressSecurity #LiteSpeedCache #PluginVulnerability #CyberSecurity #HackerAlert #AdminControl #WebsiteSafety #WordPressHacks #OnlineSecurity #TechNews
https://cloudhosting.evostrix.eu/wordpress-litespeed-cache-plugin-vulnerability-gives-hackers-admin-control/

WordPress LiteSpeed Cache Plugin Vulnerability Gives Hackers Admin Control
Are you a WordPress user who relies on the LiteSpeed Cache plugin to keep your site running smoothly and efficiently? Well, you might want to pay attention to this latest development.
#WordPressSecurity #LiteSpeedCache #PluginVulnerability #CyberSecurity #HackerAlert #AdminControl #WebsiteSafety #WordPressHacks #OnlineSecurity #TechNews
https://cloudhosting.evostrix.eu/wordpress-litespeed-cache-plugin-vulnerability-gives-hackers-admin-control/

WordPress LiteSpeed Cache Plugin Vulnerability Gives Hackers Admin Control
Are you a WordPress user who relies on the LiteSpeed Cache plugin to keep your site running smoothly and efficiently? Well, you might want to pay attention to this latest development.
#WordPressSecurity #LiteSpeedCache #PluginVulnerability #CyberSecurity #HackerAlert #AdminControl #WebsiteSafety #WordPressHacks #OnlineSecurity #TechNews
https://cloudhosting.evostrix.eu/wordpress-litespeed-cache-plugin-vulnerability-gives-hackers-admin-control/

WordPress LiteSpeed Cache Plugin Vulnerability Gives Hackers Admin Control
Are you a WordPress user who relies on the LiteSpeed Cache plugin to keep your site running smoothly and efficiently? Well, you might want to pay attention to this latest development.
#WordPressSecurity #LiteSpeedCache #PluginVulnerability #CyberSecurity #HackerAlert #AdminControl #WebsiteSafety #WordPressHacks #OnlineSecurity #TechNews
https://cloudhosting.evostrix.eu/wordpress-litespeed-cache-plugin-vulnerability-gives-hackers-admin-control/

Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites https://www.securityweek.com/exploitation-expected-for-flaw-in-caching-plugin-installed-on-5m-wordpress-sites/ #pluginvulnerability #Vulnerabilities #WordPress

Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites https://www.securityweek.com/exploitation-expected-for-flaw-in-caching-plugin-installed-on-5m-wordpress-sites/ #pluginvulnerability #Vulnerabilities #WordPress

Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites https://www.securityweek.com/exploitation-expected-for-flaw-in-caching-plugin-installed-on-5m-wordpress-sites/ #pluginvulnerability #Vulnerabilities #WordPress

Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites https://www.securityweek.com/exploitation-expected-for-flaw-in-caching-plugin-installed-on-5m-wordpress-sites/ #pluginvulnerability #Vulnerabilities #WordPress

Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites https://www.securityweek.com/exploitation-expected-for-flaw-in-caching-plugin-installed-on-5m-wordpress-sites/ #pluginvulnerability #Vulnerabilities #WordPress

Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites https://www.securityweek.com/exploitation-expected-for-flaw-in-caching-plugin-installed-on-5m-wordpress-sites/ #pluginvulnerability #Vulnerabilities #WordPress

Do you have a WordPress website? If you have the LiteSpeed Cache plugin, you must update it, now. There's a vulnerability that could put your data at risk, but a patch is already available. Phew

#WordPress #PluginVulnerability #CyberSecurity https://www.techradar.com/pro/security/this-wordpress-plugin-vulnerability-has-put-millions-of-websites-at-risk

WordPress Builder Plugin Flaw Exposes 3,300+ Websites To XSS Attack https://gbhackers.com/wordpress-builder-plugin-flaw/ #PluginVulnerability #CrosssiteScripting #CVE/vulnerability #CyberSecurityNews #WordPresssecurity #XSSAttacks

WordPress Builder Plugin Flaw Exposes 3,300+ Websites To XSS Attack https://gbhackers.com/wordpress-builder-plugin-flaw/ #PluginVulnerability #CrosssiteScripting #CVE/vulnerability #CyberSecurityNews #WordPresssecurity #XSSAttacks

WordPress Builder Plugin Flaw Exposes 3,300+ Websites To XSS Attack https://gbhackers.com/wordpress-builder-plugin-flaw/ #PluginVulnerability #CrosssiteScripting #CVE/vulnerability #CyberSecurityNews #WordPresssecurity #XSSAttacks