UpdraftPlus: WordPress Backup Plugin with Authentication Bypass Vulnerability
UpdraftPlus is a popular WordPress backup plugin. It has a high-severity authentication bypass vulnerability (CVE-2026-10795) that may have been used as an…
Tag: WordPress plugin
TrustPulse: Compromised WordPress Social Proof Plugin
TrustPulse is a WordPress plugin for social proof notifications, owned by Awesome Motive. Its JavaScript was tampered with for about 25 minutes…
PushEngage: Compromised WordPress Push Notification Plugin
PushEngage is a WordPress plugin for push notifications, acquired by Awesome Motive. Its JavaScript files were tampered with to plant backdoors on…
OptinMonster: Compromised WordPress Lead Generation Plugin
OptinMonster is a WordPress plugin for lead generation and email marketing, owned by Awesome Motive. Its JavaScript was tampered with for about…
Gravity SMTP: WordPress SMTP Plugin
Gravity SMTP is a WordPress plugin used for configuring SMTP email settings and integrating with third-party email services. It is installed on…