CISA has added a high-severity WordPress Core vulnerability to its Known Exploited Vulnerabilities catalogue after confirming it is being actively exploited in the wild.
CISA has added a high-severity WordPress Core vulnerability, CVE-2026-119977, to its Known Exploited Vulnerabilities catalogue after confirming active exploitation in the wild.
Rank Math has confirmed a supply-chain attack affecting the PRO version of its popular WordPress SEO plugin, allowing attackers to plant persistent backdoors and steal sensitive credentials from affected websites.
A critical cross-site request forgery (CSRF) vulnerability in the Elementor plugin allows attackers to create new administrator accounts on vulnerable WordPress sites.
A cross-site request forgery (CSRF) vulnerability in the Elementor WordPress plugin allows attackers to create administrator accounts via a single malicious link.
