Urgent Cornerstone Plugin Arbitrary Code Vulnerability//Published on 2026-06-06//CVE-2026-49113
Urgent WordPress Cornerstone RCE advisory CVE-2026-49113; update to 7.8.8 now
WP-FIREWALL SECURITY TEAM
Arbitrary File Download Vulnerability in WordPress Media//Published on 2026-06-06//CVE-2026-9690
Urgent WordPress security advisory CVE-2026-9690 WP Media Folder Addon <=4.0.1 update to 4.0.2
Critical Authentication Flaw in RegistrationMagic Plugin//Published on 2026-06-06//CVE-2026-49764
Critical RegistrationMagic broken authentication CVE-2026-49764 with patch, mitigations, and WAF guidance.
Mitigating Broken Authentication in WooCommerce//Published on 2026-06-06//CVE-2026-49110
Urgent security advisory: unauthenticated price manipulation in WooCommerce Upsell Order Bump CVE-2026-49110.
Urgent Cornerstone Plugin Arbitrary Code Vulnerability//Published on 2026-06-06//CVE-2026-49113
Urgent WordPress Cornerstone RCE advisory CVE-2026-49113; update to 7.8.8 now
Mitigating Broken Authentication in WooCommerce//Published on 2026-06-06//CVE-2026-49110
Urgent security advisory: unauthenticated price manipulation in WooCommerce Upsell Order Bump CVE-2026-49110.
Critical Authentication Flaw in RegistrationMagic Plugin//Published on 2026-06-06//CVE-2026-49764
Critical RegistrationMagic broken authentication CVE-2026-49764 with patch, mitigations, and WAF guidance.
Critical XSS Vulnerability in WPFunnels Pro//Published on 2026-06-06//CVE-2026-49778
Urgent XSS advisory for WordPress WPFunnels Pro ≤2.9.4 patch to 2.9.5
Critical XSS in FV Flowplayer Plugin//Published on 2026-06-06//CVE-2026-49773
Urgent guide to CVE-2026-49773 XSS in FV Flowplayer WordPress plugin and protections.
US Security Alert SQL Injection in GPTranslate//Published on 2026-06-06//CVE-2026-49776
Urgent GPTranslate SQL injection advisory CVE-2026-49776 with patch guidance and WAF protections for WordPress