Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Linked advisories
Affected vendors and products
More on WordPress
Other advisories
- MediumCVE-2026-115955bPlugins Advanced Post Block - Post Grid for WordPress block editor: Cross-Site-Scripting (XSS)
- MediumCVE-2026-115955bPlugins Advanced Post Block - Post Grid for WordPress block editor: Cross-Site-Scripting (XSS)
- HighCVE-2026-55826Stape-io Gtm-server-side-wordpress-plugin: Offenlegung vertraulicher Informationen
- Not ratedosv:CVE-2026-55826Customer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin
- HighCVE-2026-55826Stape-io Gtm-server-side-wordpress-plugin: Offenlegung vertraulicher Informationen
- MediumCVE-2026-114696miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- MediumCVE-2026-114696miniOrange Page Restriction WordPress (WP): fehlende Autorisierung
- LowCVE-2026-88849MasterStudy LMS WordPress Plugin: fehlerhafte Autorisierung
Other news entries
- WordPress sites compromised after TeamUpdraft credential exposureNewsCSO Online
- Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress SitesNewsThe Hacker News
- Stolen UpdraftCentral keys used to backdoor WordPress sitesNewsBleepingComputer
- WordPress SEO plugin Rank Math compromised to backdoor websitesNewsBleepingComputer
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorNewsThe Hacker News
- Rank Math PRO WordPress Plugin Compromised in Supply Chain AttackNewsSecurityWeek
- Bricksforge WordPress Plugin Vulnerability Exploited in the WildNewsSecurityWeek
- Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCENewsThe Hacker News
Source: https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html
ID