2026-06-02Critical: What WordPress Site Owners Need to Know About the rognone Plugin Reflected XSS (CVE-2026-1451) — A WP-Firewall Security AdvisoryRead article →
2026-06-02Broken Access Control in JTL‑Connector for WooCommerce (<= 2.4.1): What it Means for Your Store and How to Protect ItRead article →
2026-06-02Broken Access Control in Crew HRM plugin (<=1.2.2, CVE‑2026‑27351) — What it means for WordPress site owners and how WP‑Firewall protects youRead article →
2026-06-02BirdSeed <= 2.2.0 — CSRF Vulnerability (CVE-2026-4071): What WordPress Site Owners Need to Know and How WP‑Firewall Protects YouRead article →
2026-06-02Authenticated (Subscriber) Stored XSS in FPW Category Thumbnails (≤ 1.9.5) — What WordPress Site Owners Must Do Right NowRead article →
2026-06-01WP Statistics (<= 14.16.6) XSS (CVE-2026-48839) — What WordPress Site Owners Must Do NowRead article →
2026-06-01WP Nano AD <= 1.31 — Authenticated Administrator Stored XSS (CVE-2025-5085): What WordPress Site Owners Need to Know and How WP‑Firewall Protects YouRead article →
2026-06-01Urgent: SQL Injection in TableOn (<= 1.0.5.1) — What WordPress Site Owners Must Do NowRead article →
2026-06-01Urgent: Reflected XSS in LearnPress (CVE-2026-48865) — What WordPress Site Owners Need to Do NowRead article →
2026-06-01Urgent: Privilege Escalation in Kirki 6.0.0–6.0.6 (CVE-2026-8206) — What WordPress Site Owners Must Do NowRead article →
2026-06-01Urgent: Privilege Escalation in ACF Extended (≤ 0.9.2.5) — What WordPress Site Owners Must Do NowRead article →
