All versions up to 7.8.3 contained a vulnerability that allowed threat actors to upload arbitrary files, including malware ...

Critical WordPress flaw CVE-2025-5394 lets attackers take over sites using the "Alone" theme. 120K+ attempts blocked.

Threat actors are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the WordPress theme ...

More than 10,000 WordPress sites have been left vulnerable to full site takeover due to three critical security flaws ...

Looking at the download statistics on WordPress.org, 59.8% of all Post SMTP installations are running versions 3.1 and newer, meaning 40.2% of sites are still vulnerable. Since the plugin has more ...

StylemixThemes released Motors version 5.6.68, which addresses CVE-2025-4322 on May 14, 2025.