Fresh WordPress Vulnerability in Attackers’ Crosshairs
Teaser from the source
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on WordPress
Other advisories
- Not ratedosv:CLEANSTART-2025-GV56895Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id’ parameter in versions up to, and including, 2
- MediumCVE-2026-15272Shamalli Web 2.0 Directory plugin for WordPress: SQL-Injection
- MediumCVE-2026-15272Shamalli Web 2.0 Directory plugin for WordPress: SQL-Injection
- HighCVE-2026-110530Radgeek FeedWordPress: Cross-Site-Scripting (XSS)
- HighCVE-2026-110530Radgeek FeedWordPress: Cross-Site-Scripting (XSS)
- HighCVE-2026-119977WordPress: TOCTOU-Race-Condition
- HighCVE-2026-119977WordPress: TOCTOU-Race-Condition
- HighCVE-2026-115346ThemeFusion Avada | Website Builder For WordPress & WooCommerce: uneingeschränkter Dateiupload
Other news entries
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- WordPress: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- WordPress: Exploit-Versuche beobachtet, Update stopft Schadcode-LückeNewsheise Security
- Multiples vulnérabilités dans WordPress (29 octobre 2026)NewsCERT-FR (ANSSI)
- WordPress sites compromised after TeamUpdraft credential exposureNewsCSO Online
- Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress SitesNewsThe Hacker News
- Stolen UpdraftCentral keys used to backdoor WordPress sitesNewsBleepingComputer
Source: https://www.securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/
ID