When patched last week, the bug affected at least 1 million websites. Zero-day exploits were going on then. Active exploits are targeting a recently patched flaw in the popular WordPress plugin ...

A critical vulnerability in the WPvivid Backup & Migration plugin for WordPress, installed on more than 900,000 websites, can be exploited to achieve remote code execution by uploading arbitrary files ...

All-in-One WP Migration, a popular data migration plugin for WordPress sites with 5 million active installations, suffers from unauthenticated access token manipulation that could allow attackers to ...