Authentication Bypass Discovered in WP Time Capsule//Published on 2026-06-01//CVE-2026-42760
Critical vulnerability CVE-2026-42760 in WP Time Capsule; update to 1.22.26 or block via WAF
WP-FIREWALL SECURITY TEAM
Authentication Bypass Discovered in WP Time Capsule//Published on 2026-06-01//CVE-2026-42760
Critical vulnerability CVE-2026-42760 in WP Time Capsule; update to 1.22.26 or block via WAF
Kirki Privilege Escalation Vulnerability Advisory//Published on 2026-06-01//CVE-2026-8206
Urgent Kirki CVE-2026-8206 security advisory; update to 6.0.7 and harden WordPress.
Kirki Privilege Escalation Vulnerability Advisory//Published on 2026-06-01//CVE-2026-8206
Urgent Kirki CVE-2026-8206 security advisory; update to 6.0.7 and harden WordPress.
Critical XSS Vulnerability in WP Statistics Plugin//Published on 2026-06-01//CVE-2026-48839
WordPress WP Statistics XSS CVE-2026-48839: urgent patch to 14.16.7 and WAF guidance
Securing WordPress From LearnPress XSS Attacks//Published on 2026-06-01//CVE-2026-48865
Urgent guide: CVE-2026-48865 reflected XSS in LearnPress, patch now and mitigate
Securing WordPress From LearnPress XSS Attacks//Published on 2026-06-01//CVE-2026-48865
Urgent guide: CVE-2026-48865 reflected XSS in LearnPress, patch now and mitigate
Critical XSS Vulnerability in WP Statistics Plugin//Published on 2026-06-01//CVE-2026-48839
WordPress WP Statistics XSS CVE-2026-48839: urgent patch to 14.16.7 and WAF guidance
Hardening WooCommerce Infinite Scroll Against Deserialization//Published on 2026-06-01//CVE-2025-11993
Urgent guide to CVE-2025-11993 PHP object injection in WooCommerce Infinite Scroll for WordPress sites
Hardening WooCommerce Infinite Scroll Against Deserialization//Published on 2026-06-01//CVE-2025-11993
Urgent guide to CVE-2025-11993 PHP object injection in WooCommerce Infinite Scroll for WordPress sites