FBI Warns Drupal Site Owners About Active Exploitation of CVE-2026-4.8
An alleged FBI warning regarding CVE-2026-4.8 and active Drupal exploitation has circulated online, but extensive verification through official...
Drupal Sites Hit by Massive Botnet Attack Targeting Yoast SEO Specific Vulnerability
A massive botnet attack has specifically targeted Drupal sites running Yoast SEO, exploiting a vulnerability in how the plugin handles certain requests on...
New Zero Day Drupal Vulnerability Lets Hackers Take Over Sites in Seconds
A series of critical vulnerabilities discovered in Drupal core in 2026 poses significant risks to websites running affected versions, though the actual...
Drupal Plugin With 4.8 Million Installs Discovered to Have Backdoor Malware
A widely-installed Drupal plugin with millions of active deployments was recently found to contain malware code designed to give attackers backdoor access...
Critical Drupal Vulnerability Affects 4.8 Million Sites – Update Required Immediately
While a specific critical Drupal vulnerability affecting exactly 4.8 million sites has not been independently verified in official sources, multiple...
WordPress Vulnerability Database Adds 23 New CVEs This Month
Specific data about 23 new CVEs added to the WordPress Vulnerability Database in May 2026 is not yet widely available, as monthly vulnerability statistics...
Researchers Find 3 Critical Flaws in Popular UpdraftPlus Plugin Used by 12.5 Million Sites
Researchers have identified three critical security vulnerabilities in UpdraftPlus, the WordPress backup and migration plugin trusted by approximately 12.
WordPress Admin Accounts Sold on Dark Web for $780 Each According to Report
Reports of WordPress admin accounts being sold on dark web marketplaces reflect a significant and ongoing threat to website owners.
Sucuri Detects 185 Percent Rise in WordPress Hacks Targeting UpdraftPlus Plugins
Sucuri, one of the leading WordPress security firms, released a significant security report revealing that WordPress sites using the UpdraftPlus backup...
Wordfence Report: 12.5 Million WordPress Sites Attacked in October 2026
The widely-referenced Wordfence report claiming 12.5 million WordPress sites were attacked in October 2026 could not be verified through available sources...