Vulnerabilities Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover Vulnerabilities in The Events Calendar can provide attackers with remote code execution capabilities. Ionut ArghireSeptember 16, 2026
Vulnerabilities Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs Threat actors are exploiting vulnerable Kirki and Burst Statistics deployments to elevate privileges and take over websites. Ionut ArghireJune 3, 2026
Vulnerabilities Ally WordPress Plugin Flaw Exposes Over 200,000 Websites to Attacks The issue allows attackers to inject SQL queries and extract sensitive information from the database. Ionut ArghireMarch 12, 2026
Vulnerabilities Exploitation Expected for Flaw in Caching Plugin Installed on 5M WordPress Sites A critical vulnerability in the Litespeed Cache WordPress plugin can allow attackers to hack websites by creating an admin user. Eduard KovacsAugust 22, 2024