Tag: wordpress plugins

Security

Critical Unauthenticated Authentication Bypass Vulnerability Patched in UpdraftPlus WordPress Plugin

A critical unauthenticated authentication bypass vulnerability in UpdraftPlus was patched in June 2026. This flaw allows attackers to execute arbitrary commands as administrators on sites connected to UpdraftCentral, risking full site compromise. Immediate plugin updates and firewall protections are essential.

Jul 8, 2026 · 6 min read

Security

Critical Malware Campaign Exploits WP-Automatic Plugin Vulnerability in Over 5 Million Attacks

A critical SQL injection vulnerability in WP-Automatic plugin has led to over 5.5 million attack attempts, enabling attackers to gain admin access and upload malware.

May 17, 2026 · 5 min read

Security

Identifying Traffic from Shell Finder Bots Targeting WordPress Sites

Shell finder bots are scanning WordPress sites for backdoor shells, enabling attackers to maintain stealthy access. Recognizing and blocking these scans is vital for site security.

May 17, 2026 · 5 min read