300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw
Teaser from the source
Tracked as CVE-2026-15748, the arbitrary file upload bug allows unauthenticated attackers to upload executable files. The post 300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekAffected vendors and products
More on WordPress
Other advisories
- CriticalCVE-2026-61992Von Eyal Fitoussi GEO my WordPress: Deserialisierung nicht vertrauenswürdiger Daten
- CriticalCVE-2026-61992Von Eyal Fitoussi GEO my WordPress: Deserialisierung nicht vertrauenswürdiger Daten
- MediumCVE-2026-80069Stylemix MasterStudy LMS WordPress Plugin: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-80067Stylemix MasterStudy LMS WordPress Plugin: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-54852miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-54852miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-80069Stylemix MasterStudy LMS WordPress Plugin: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-80067Stylemix MasterStudy LMS WordPress Plugin: Pfadüberschreitung (Path Traversal)
Other news entries
- Multiples vulnérabilités dans WordPress (29 octobre 2026)NewsCERT-FR (ANSSI)
- WordPress sites compromised after TeamUpdraft credential exposureNewsCSO Online
- Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress SitesNewsThe Hacker News
- Stolen UpdraftCentral keys used to backdoor WordPress sitesNewsBleepingComputer
- WordPress SEO plugin Rank Math compromised to backdoor websitesNewsBleepingComputer
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorNewsThe Hacker News
- Rank Math PRO WordPress Plugin Compromised in Supply Chain AttackNewsSecurityWeek
- Bricksforge WordPress Plugin Vulnerability Exploited in the WildNewsSecurityWeek
ID