WordPress News Articles

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Ransomware affiliates used human-approved AI workflows to exploit edge systems, steal data, and target an estimated 62 organizations.

1 week ago

The patch is out — and attackers are already racing to exploit it - Spiceworks

Public patch disclosures give attackers a head start. Modern patching requires risk-based deployment speed over rigid calendars

2 weeks ago

Bricksforge CVE-2026-85097: Fix Critical RCE Flaw

Bricksforge CVE-2026-85097 is under active attack. See affected WordPress plugin versions, critical risks, patch guidance, and signs of exploitation.

2 weeks ago

WordPress Sites Face Immediate Threat as Attackers Weaponize Bricksforge Plugin Flaw for Unauthenticated Server Takeover

Attackers exploit CVE-2026-85097 in the Bricksforge WordPress plugin for unauthenticated remote code execution via polyglot file uploads. Active since October 7 with clusters of automated probes observed, the CVSS 10.0 flaw affects thousands of sites. Immediate patching to version 3.1.8.10 or later ...

2 weeks ago

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Bricksforge's CVE-2026-85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress sites.

3 weeks ago

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

A critical vulnerability in the Bricksforge WordPress plugin, tracked as CVE-2026-85097, has been exploited in the wild. 

3 weeks ago

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

SC WordPress malware rebuilds its backdoor from files, the database, and shared memory; fewer than 20 wpForo exploit attempts were seen since July 3.

1 month ago

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure - SwapUpdate

Ravie LakshmananSep 24, 2026Vulnerability / Web Security

Critical Contact Form 7 Vulnerability CVE-2026-87902 Actively Exploited in WordPress 6.6

WordPress sites face active exploitation of critical CVE-2026-87902 in Contact Form 7 (v5.9.2–5.9.5) on WordPress 6.6.x, enabling unauthenticated attackers to upload PHP backdoors via directory traversal and gain full control. Immediate patching to plugin 5.9.6+ and core 6.6.2 is essential.

CVE-2026-87902: Critical Vulnerability in WordPress

We explain in simple terms why the CVE-2026-87902 vulnerability is dangerous, and how to protect your company against it.

WordPress Patch Became Exploit Blueprint: CVE-2026-87902 Webshells Hit 350K Sites

CVE-2026-87902: Hackers deployed PHP webshells on WordPress servers within 48 hours of the September 22 security patch, with attack traffic surging tenfold as more than 350,000 sites remain

WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution

Hackers are actively exploiting CVE-2026-87902, a critical WordPress flaw that can lead to remote code execution. Here’s what admins should do.

Hackers Actively Exploiting Wordpress Vulnerability to Execute Malicious Code

The critical WordPress vulnerability is actively exploited to write malicious PHP files on vulnerable servers.

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Attackers are exploiting WordPress CVE-2026-87902 to include pearcmd.php and write PHP files when specific theme and server conditions are met.

WordPress patches a critical severity security vulnerability

The hole, which allows an unauthenticated attacker to perform remote code execution, is especially dangerous because many enterprises are not aware of all of their WordPress sites.

Critical WordPress Vulnerability Exploited Immediately After Disclosure

Hackers started exploiting CVE-2026-87902, a critical WordPress flaw leading to RCE, within hours of public disclosure.

Hackers start exploiting critical WordPress flaw for code execution

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed.

WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902) - IT Security News

2026-09-23 11:09 WordPress released version 7.1.2 to fix a critical flaw that lets an unauthenticated attacker make the software load a PHP file of the attacker’s choosing from outside the...

WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902) - Help Net Security

WordPress 7.1.2 security release fixes a critical flaw (CVE-2026-87902) letting unauthenticated attackers load local PHP files and run code.

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Attackers are exploiting CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload PHP web shells and gain remote code execution.

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

Hackers are exploiting a vulnerability (CVE-2026-32475) in the Elementor Pro plugin to hack WordPress sites.

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

Attackers are exploiting Super Forms and Elementor Pro flaws to upload PHP files and execute code on WordPress sites.

Critical Elementor Pro flaw exploited to take over WordPress sites

A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server.

WordPress backup plugin flaw exposes millions of sites to takeover attacks

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control of affected websites.

Critical Avada WordPress theme flaw enables zero-click RCE

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server.