patchstack

vulnerability

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

A critical vulnerability in WordPress allows an attacker without an account to load a PHP file from outside the theme folders, potentially leading to code execution on some servers. This flaw, assigned a CVSS score of 9.…

The Hacker News · 1d ago HighCVSS 8.1

CVE-2026-87902 wordpress vulnerability php

vulnerability

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Multiple critical vulnerabilities have been discovered in popular WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP. These flaws could lead to complete site takeover, all…

The Hacker News · Aug 29, 2026 Critical

CVE-2026-76581 CVE-2026-18431 CVE-2026-19632 wordpress vulnerability plugin

vulnerability

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Attackers are exploiting two unauthenticated vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, allowing them to gain administrator access to vulnerable sites. The vulnerabilities stem from f…

The Hacker News · Aug 25, 2026 High

CVE-2026-61979 CVE-2026-15981 wordpress saml authentication

All articles

news.mlab.sh

patchstack

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access