New Zero Day Ghost Vulnerability Lets Hackers Take Over Sites in Seconds
A critical zero-day vulnerability in Ghost CMS has exposed a significant security flaw in one of the web's most popular publishing platforms.
Ghost Plugin With 4.8 Million Installs Discovered to Have Backdoor Malware
A widely distributed WordPress plugin found its way onto millions of websites with a critical flaw: embedded backdoor code designed to give attackers...
Critical Ghost Vulnerability Affects 4.8 Million Sites – Update Required Immediately
Ghost CMS currently faces multiple critical vulnerabilities affecting its core platform, with the most severe being a remote code execution flaw that...
Webflow Vulnerability Database Adds 23 New CVEs This Month
There is no verified announcement documenting 23 new CVEs added to a Webflow vulnerability database this month.
Researchers Find 3 Critical Flaws in Popular WPForms Plugin Used by 12.5 Million Sites
Researchers at Wordfence, a leading WordPress security firm, have identified three critical vulnerabilities in WPForms, a form-building plugin installed...
Webflow Admin Accounts Sold on Dark Web for $1,200 Each According to Report
Reports claiming that Webflow admin accounts are being sold on the dark web for $1,200 each have circulated online, but extensive searches of credible...
Sucuri Detects 28 Percent Rise in Webflow Hacks Targeting WPForms Plugins
Sucuri's latest security report reveals a concerning 28 percent increase in hacks targeting WPForms plugins, one of the most widely used form-building...
Wordfence Report: 12.5 Million Webflow Sites Attacked in February 2026
A claim circulating in February 2026 suggested that Wordfence had documented an attack affecting 12.
Webflow Releases Emergency Patch After 12.5 Million Sites Found Vulnerable
Webflow has released an emergency security patch following the discovery of a critical vulnerability affecting approximately 12.
How to Tell if Your Webflow Site Was Compromised in Latest February Attack
Your Webflow site almost certainly was not compromised by Webflow itself in the February attack—because there was no Webflow platform breach.