Critical WordPress flaw CVE-2025-5394 lets attackers take over sites using the "Alone" theme. 120K+ attempts blocked.

Threat actors are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the WordPress theme ...

Looking at the download statistics on WordPress.org, 59.8% of all Post SMTP installations are running versions 3.1 and newer, meaning 40.2% of sites are still vulnerable. Since the plugin has more ...

StylemixThemes released Motors version 5.6.68, which addresses CVE-2025-4322 on May 14, 2025.

More than 10,000 WordPress sites have been left vulnerable to full site takeover due to three critical security flaws ...

Malware hidden in WordPress mu-plugins grants attackers full access and admin control, putting websites and users at serious ...