techtimes

CVE & Vulnerability Tracker

Data: CISA KEV Catalog, NVD (NIST). Both are U.S. Government public-domain feeds. Not security advice.
Cyber Security News

Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks

WordPress released version 7.1.3 on October 6, 2026, addressing vulnerabilities involving cross-site scripting, SQL injection ...

Falha no plugin Ninja Forms permite invadir sites WordPress

Hackers exploram falha no plugin Ninja Forms e WPC Product Bundles para criar administradores ocultos no WordPress. Saiba ...

Ataques exploram falhas no Ninja Forms e WPC Product Bundles do WordPress

Uma nova campanha maliciosa está a explorar vulnerabilidades de cross-site scripting (XSS) em dois populares plugins do ...

WordPress 7.1.3 corrige sete falhas de segurança e erro crítico

O WordPress anunciou o lançamento da versão 7.1.3, uma atualização de manutenção e segurança que resolve sete ...

WordPress 7.1.3 Fixes 7 Vulnerabilities And 1 Critical Flaw

WordPress 7.1.3 addresses seven security vulnerabilities and fixes a critical flaw that can make image uploads fail with a ...

Ninja Forms plugin flaw exploited to hack WordPress sites

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and ...
cyberkendra.com

WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws

WordPress 7.1.3 patches seven core vulnerabilities, including stored XSS on the Comments screen and a second-order SQL ...
RS Web Solutions

Covert WordPress Malware Employs Essential Plugin and Ethereum Ether Hiding for Ongoing Backdoor Access

Discover how a covert WordPress malware exploits the Essential plugin and hides Ethereum Ether to maintain undetected ...

The Decision to Quit WordPress: 2026, the Year Core Vulnerabilities Jumped from 2 to 31, and What You Can't Protect Even by Paying for Maintenance

On September 22, 2026, a critical vulnerability in WordPress was disclosed. Two days later, on September 24, Xserver issued ...
rapid7

CVE-2026-5924: jetmonsters Getwid – Gutenberg Blocks: The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps…

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and including, 2.1.3. This is ...