WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the […]
Category: WordPress
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) […]
The Wayback Machine is looking to make deadlinks a thing of the past
The Wayback Machine from the Internet Archive has long been on a mission to archive as much online content as […]
WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts
Dec 03, 2025Ravie LakshmananVulnerability / Website Security A critical security flaw impacting a WordPress plugin known as King Addons for […]
Typepad is closing down, move fast to save your content!
Out of the blue, Typepad has announced that it is closing down. The stalwart blogging service says it was a […]
Blogging service TypePad is shutting down and taking all blog content with it
TypePad was a blogging service based on the Movable Type content management system but hosted on TypePad’s site and with […]
WordPress Sites Turned Weapon: How VexTrio and Affiliates Run a Global Scam Network
Jun 12, 2025Ravie LakshmananThreat Intelligence / Malware The threat actors behind the VexTrio Viper Traffic Distribution Service (TDS) have been […]
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin
May 29, 2025Ravie LakshmananVulnerability / Website Security Cybersecurity researchers have disclosed a critical unpatched security flaw impacting TI WooCommerce Wishlist […]
Pocket Casts makes its web player free, takes shots at Spotify and AI
“The future of podcasting shouldn’t be locked behind walled gardens,” writes the team at Pocket Casts. To push that point […]
Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access
Mar 06, 2025Ravie LakshmananData Breach / Website Security Over 1,000 websites powered by WordPress have been infected with a third-party […]