2026-06-06Urgent Security Advisory: Arbitrary File Download (CVE-2026-9690) in WP Media Folder Addon (<= 4.0.1)Read article →
2026-06-06Urgent Security Advisory — Cross-Site Scripting (XSS) in WPFunnels Pro (≤ 2.9.4) — What WordPress Site Owners Must Do NowRead article →
2026-06-06Critical: Broken Authentication in RegistrationMagic (WordPress) — What You Must Do NowRead article →
2026-06-05Urgent: XSS in “Drag and Drop Multiple File Upload – Contact Form 7” (≤1.3.9.7) — What WordPress Site Owners Must Do NowRead article →
2026-06-05Urgent: SQL Injection in Geo Mashup (<= 1.13.19) — What WordPress Site Owners Must Do NowRead article →
2026-06-05Urgent: Hybrid Composer (<= 1.4.6) Broken Authentication — What WordPress Site Owners Must Do Right NowRead article →
2026-06-05Urgent: Cross‑Site Scripting (XSS) in AutomatorWP (≤ 5.7.2) — What WordPress Site Owners Must Do NowRead article →
2026-06-05Urgent: Arbitrary File Download in “Ad Manager Wd” plugin (<= 1.0.11) — What WordPress Site Owners Must Do NowRead article →
2026-06-05URGENT: CVE-2026-48966 — Cross-Site Scripting in Funnel Builder by FunnelKit (<= 3.15.0.2) — What WordPress Site Owners Must Do NowRead article →
2026-06-05Server-Side Request Forgery (SSRF) in Essential Blocks for Gutenberg (<= 6.1.3) — What Site Owners Must Do NowRead article →
2026-06-05Sensitive Data Exposure in “WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels” Plugin (≤ 4.9.4) — What WordPress Site Owners Must Do NowRead article →
