Technology ❯ Software ❯ Web Development

Content Management Systems

WordPress Drupal WordPress Plugins Joomla WordPress Security

Critical WordPress File-Inclusion Flaw Patched but Exploited Within Hours

Exploit chains write PHP payloads to disk on servers with vulnerable themes or risky PHP settings, raising immediate risk.

WordPress Fixes Click2Shell Flaw That Could Let Admin Click Trigger Server RCE

Elementor Pro Vulnerability Fueled Widespread Webshell Attacks

Second‑Order SQL Flaw in Popular WordPress Migration Plugin Leaves Millions Exposed

Critical SAML Flaws Let Hackers Forge Logins on miniOrange WordPress Plugin

StopAndProtect Turns Nearly 2,000 Hacked WordPress Sites Into a Malware Network

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Supply-Chain Malware Tampered With Awesome Motive Plugin Scripts

Active Exploits Hit Drupal SQL Injection Flaw CVE-2026-9082

Hackers Exploit Critical Ninja Forms File Uploads Flaw to Seize WordPress Sites

WordPress.com Rolls Out Built-In AI Assistant Across Editor and Media Library

WordPress Modular DS Flaw Under Active Attack as Patch Ships to Block Admin Takeovers

WordPress King Addons Flaw Actively Exploited to Create Admin Accounts

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts