Hackers are exploiting a critical vulnerability in the User Registration & Membership plugin, which is installed on more than 60,000 WordPress sites. Developed by WPEverest, the plugin provides ...
Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. The flaw is tracked as CVE-2026-4020 and received a ...
Thousands of WordPress sites running the Kali Forms plugin are exposed to attackers who can execute arbitrary code on web servers without ever logging in. The flaw, tracked as CVE-2026-3584, carries a ...
Security researchers confirmed in-the-wild exploitations of the mx-severity flaw, allowing unauthenticated actors gain full admin access on vulnerable sites. Security researchers have confirmed active ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results