Patchstack

vulnerability

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical vulnerabilities have been discovered in popular WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP. These flaws could lead to complete site takeover, all…

The Hacker News · 1d ago Critical

CVE-2026-76581 CVE-2026-18431 CVE-2026-19632 wordpress vulnerability plugin

vulnerability

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Attackers are exploiting two unauthenticated vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, allowing them to gain administrator access to vulnerable sites. The vulnerabilities stem from f…

The Hacker News · 5d ago High

CVE-2026-61979 CVE-2026-15981 wordpress saml authentication

All articles

news.mlab.sh

Patchstack

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access