ShapedPlugin update flow hacked to infect WordPress sites:

bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/

Credibility A−

Oct 21

Stolen UpdraftCentral keys used to backdoor WordPress sites: A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and ...

bleepingcomputer.com/news/security/critical-wp2shell-wordpress-flaws-exploited-to-install-webshells/

Jul 21

Critical wp2shell WordPress flaws exploited to install webshells: Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 ...

bleepingcomputer.com/news/security/we-built-a-vulnerability-vending-machine-ai-tokens-in-zero-days-out/

Jul 15

We built a vulnerability vending machine: AI tokens in, zero-days out: Intruder built an AI-powered "vulnerability vending machine" that combines code ...

bleepingcomputer.com/news/security/hackers-exploit-info-disclosure-bug-in-gravity-smtp-wordpress-plugin/

Jun 19

Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin: Threat actors are exploiting an unauthenticated information disclosure vulnerability in the ...

bleepingcomputer.com/news/security/optinmonster-wordpress-plugin-hacked-in-cdn-supply-chain-attack/

Jun 15

OptinMonster WordPress plugin hacked in CDN supply-chain attack: WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a ...

bleepingcomputer.com/news/security/wp-maps-pro-bug-exploited-to-create-admin-accounts-on-wordpress-sites/

May 31

WP Maps Pro bug exploited to create admin accounts on WordPress sites: Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro ...

bleepingcomputer.com/news/security/funnel-builder-wordpress-plugin-bug-exploited-to-steal-credit-cards/

May 15

Funnel Builder WordPress plugin bug exploited to steal credit cards: A critical vulnerability in the Funnel Builder plugin for WordPress is being actively ...

bleepingcomputer.com/news/security/avada-builder-wordpress-plugin-flaws-allow-site-credential-theft/

May 15

Avada Builder WordPress plugin flaws allow site credential theft: Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million ...

bleepingcomputer.com/news/security/hackers-exploit-auth-bypass-flaw-in-burst-statistics-wordpress-plugin/

May 14

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin: Hackers are leveraging a critical authentication bypass vulnerability in the WordPress ...