StellarWP

vulnerability

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

Two critical vulnerabilities in the popular WordPress plugin, The Events Calendar, could expose up to 240,000 WordPress websites to takeover attacks. Attackers can exploit these flaws to execute code remotely, potentiall…

SecurityWeek · Sep 16, 2026 CriticalCVSS 9.8

CVE-2026-78159 CVE-2026-78006 wordpress rce vulnerability

vulnerability

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Threat actors are exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin to upload PHP web shells and achieve remote code execution. Wordfence has blocked over 100,000 attempts since June 20…

The Hacker News · Sep 16, 2026 CriticalCVSS 9.8

CVE-2026-27540 CVE-2026-78159 CVE-2026-78006 wordpress vulnerability remote code execution

All articles

news.mlab.sh

StellarWP

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells