Critical Drupal Vulnerability Affects 4.8 Million Sites – Update Required Immediately
While a specific critical Drupal vulnerability affecting exactly 4.8 million sites has not been independently verified in official sources, multiple...
WordPress Vulnerability Database Adds 23 New CVEs This Month
Specific data about 23 new CVEs added to the WordPress Vulnerability Database in May 2026 is not yet widely available, as monthly vulnerability statistics...
Researchers Find 3 Critical Flaws in Popular UpdraftPlus Plugin Used by 12.5 Million Sites
Researchers have identified three critical security vulnerabilities in UpdraftPlus, the WordPress backup and migration plugin trusted by approximately 12.
WordPress Admin Accounts Sold on Dark Web for $780 Each According to Report
Reports of WordPress admin accounts being sold on dark web marketplaces reflect a significant and ongoing threat to website owners.
Sucuri Detects 185 Percent Rise in WordPress Hacks Targeting UpdraftPlus Plugins
Sucuri, one of the leading WordPress security firms, released a significant security report revealing that WordPress sites using the UpdraftPlus backup...
Wordfence Report: 12.5 Million WordPress Sites Attacked in October 2026
The widely-referenced Wordfence report claiming 12.5 million WordPress sites were attacked in October 2026 could not be verified through available sources...
WordPress Releases Emergency Patch After 12.5 Million Sites Found Vulnerable
WordPress released a critical security patch after researchers discovered a vulnerability affecting an estimated 12.
How to Tell if Your WordPress Site Was Compromised in Latest October Attack
If your WordPress site runs the AI Engine plugin, uses the Service Finder theme, or has the Post SMTP plugin installed, there's a significant chance it...
WordPress Plugin Removed From Repository After 47 Confirmed Hack Cases
In April 2026, WordPress.org took the unprecedented step of removing 31 plugins in a single day after discovering they had been compromised with...
Hackers Exploit WordPress Theme Vulnerability to Inject Malware on 5,000 Sites
A critical vulnerability discovered in a widely-used WordPress theme has enabled attackers to inject malware onto approximately 5,000 WordPress sites,...