Browsing Tag
Plugin
9 posts
SQL Injection Vulnerability in Ally WordPress Plugin Exposes 200K+ Sites
SQL injection flaw in Ally WordPress plugin exposes 200,000+ sites to data theft. Patch released, but most installations remain unpatched and vulnerable.
March 13, 2026
New WordPress Malware Hides on Checkout Pages and Imitates Cloudflare
Wordfence exposes a sophisticated WordPress malware campaign using a rogue WordPress Core plugin. Active since 2023, it steals credit cards and credentials with advanced anti-detection.
June 25, 2025
Sneaky WordPress Malware Disguised as Anti-Malware Plugin
WordPress sites are under threat from a deceptive anti-malware plugin. Learn how this malware grants backdoor access, hides…
April 30, 2025
New PhishWP Plugin on Russian Forum Turns Sites into Phishing Pages
SlashNext has discovered a malicious WordPress plugin, PhishWP, which creates convincing fake payment pages to steal your credit card information, 3DS codes, and personal data.
January 6, 2025
Popular WordPress Plugins Leave Millions Open to Backdoor Attacks
Fastly researchers discover unauthenticated stored XSS attacks plaguing WordPress Plugins including WP Meta SEO, and the popular WP…
June 3, 2024
LiteSpeed Cache Plugin XSS Vulnerability Affects 1.8M WordPress Sites
Is your WordPress site using LiteSpeed Cache? A recent surge in malicious JavaScript injections targets vulnerable versions. Learn how to identify the signs of infection and prevent future attacks. Patch, scan, and secure your WordPress site today!
May 8, 2024
ChatGPT Plugins Exposed to Critical Vulnerabilities, Risked User Data
Critical security flaws found in ChatGPT plugins expose users to data breaches. Attackers could steal login details and…
March 13, 2024
PokeGone Chrome Plugin Erase Pokémon Go From Your Internet Life
A CHROME EXTENSION THAT CAN VIRTUALLY MAKE Pokémon Go DISAPPEAR (FROM THE WEB OF COURSE). While grown up…
July 18, 2016
WordPress Google Analytics Plugin by Yoast Vulnerable to critical site-hijacking
Yet another vulnerability has been found in the Yoast WordPress plugin that can be exploited by attackers allowing…
March 21, 2015