Patch now! Attacks on the Breeze Cache WordPress plugin observed:

bleepingcomputer.com/news/security/ninja-forms-plugin-flaw-exploited-to-hack-wordpress-sites/

Credibility A−

Oct 06

Ninja Forms plugin flaw exploited to hack WordPress sites: Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress ...

bleepingcomputer.com/news/security/hackers-target-wordpress-sites-via-third-party-woocommerce-plugin/

Sep 15

Hackers target WordPress sites via third-party WooCommerce plugin: Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead ...

techxplore.com/news/2026-09-fuzzing-tool-vulnerabilities-wordpress-plugins.html

Phys.org

Sep 11

New fuzzing tool finds security vulnerabilities in WordPress plugins: WordPress is one of the most widely used content management systems for websites ...

bleepingcomputer.com/news/security/wordpress-backup-plugin-flaw-exposes-millions-of-sites-to-takeover-attacks/

Sep 02

WordPress backup plugin flaw exposes millions of sites to takeover attacks: An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for ...

golem.de/news/wordpress-luecke-in-backup-tool-gefaehrdet-millionen-von-websites-2609-212585.html

Golem.de

Sep 03

WordPress: Void in backup tool endangers millions of websites - | Golem.de: A dangerous security vulnerability has been discovered in a WordPress plugin with ...

bleepingcomputer.com/news/security/givewp-wordpress-donation-plugin-flaw-lets-hackers-execute-server-commands/

Aug 28

GiveWP WordPress donation plugin flaw lets hackers execute server commands: A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an ...

bleepingcomputer.com/news/security/hackers-target-wordpress-sites-in-miniorange-auth-bypass-attacks/

Aug 24

Hackers target WordPress sites in miniOrange auth bypass attacks: Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the ...

heise.de/news/Jetzt-patchen-Angriffe-auf-Wordpress-Websites-mit-Gravity-SMTP-Plug-in-11339529.html

heise online

Jun 21

Patch now! Attacks on WordPress websites with the Gravity SMTP plugin: Attackers gain access to data that is supposed to be protected on WordPress websites with ...

bleepingcomputer.com/news/security/hackers-exploit-file-upload-bug-in-breeze-cache-wordpress-plugin/

Apr 23

Hackers exploit file upload bug in Breeze Cache WordPress plugin: Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for ...