CISA flags WordPress RCE flaw as actively exploited in attacks
Teaser from the source
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on WordPress
Other advisories
- Not ratedCVE-2026-115213EASY-JS-WPAPI Client HANDLE for the WordPress REST-API: Umgehung der Authentifizierung
- Not ratedCVE-2026-115213EASY-JS-WPAPI Client HANDLE for the WordPress REST-API: Umgehung der Authentifizierung
- MediumCVE-2026-104307BackUpWordPress: externe Kontrolle von Dateinamen oder -pfaden
- MediumCVE-2026-104307BackUpWordPress: externe Kontrolle von Dateinamen oder -pfaden
- MediumCVE-2026-118047Sbouey Falang multilanguage for WordPress: Cross-Site-Scripting (XSS)
- MediumCVE-2026-118047Sbouey Falang multilanguage for WordPress: Cross-Site-Scripting (XSS)
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
Other news entries
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last TimeNewsThe Hacker News
- NCSC-2026-0466 [1.00] [L/H] Kwetsbaarheid verholpen in WordPress CoreNewsNCSC-NL
- CISA Confirms Hackers Exploiting WordPress Core Flaw During Software UpgradesNewsThe Hacker News
- Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet CredentialsNewsThe Hacker News
- WordPress: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
ID