Introduction All-in-One WP Migration and Backup, one of the most widely used migration and backup plugins for WordPress, has had four separate vulnera...

Introduction The WPMU DEV Dashboard plugin had a critical authentication bypass vulnerability disclosed as CVE-2026-76581 (CVSS 9.8). On sites with Hu...

Introduction Avada, one of the best-selling WordPress themes, and its companion Fusion Builder plugin had a critical vulnerability disclosed as CVE-20...

Introduction GiveWP, a donation and fundraising plugin with more than 100,000 active installations, had a vulnerability disclosed with a maximum CVSS ...

Introduction Two critical vulnerabilities in the miniOrange SAML 2.0 Single Sign-On plugin, tracked as CVE-2026-61979 and CVE-2026-15981 (CVSS 9.8), l...

Introduction Advanced Responsive Video Embedder (ARVE), a popular video embedding plugin, had a critical vulnerability disclosed as CVE-2026-18072 (CV...

Introduction Everest Forms, installed on more than 100,000 WordPress sites, had a critical vulnerability disclosed as CVE-2026-19598 (CVSS 9.8) that l...

Introduction Elementor Pro, running on millions of WordPress sites, had a critical vulnerability disclosed as CVE-2026-32475 (CVSS 9.0) in its Forms m...

Introduction User Profile Builder, a plugin for custom registration and profile forms, had a critical authentication bypass vulnerability disclosed as...

Introduction Forminator Forms, installed on more than 600,000 WordPress sites, had a critical arbitrary file upload vulnerability disclosed and rated ...