miniOrange SAML 2.0 Single Sign On Plugin
The miniOrange SAML 2.0 Single Sign On plugin is a WordPress plugin that enables SAML-based authentication. It is affected by two critical…
Tag: WordPress plugin
Elementor Pro: WordPress Plugin with Critical RCE Flaw
A popular WordPress page builder plugin. Versions up to 4.2.1 are vulnerable to unauthenticated PHP upload and RCE (CVE-2026-32475). Patched in 4.2.2.
Forminator: WordPress Form Builder Plugin
Forminator is a popular WordPress plugin with over 600,000 active installations, used for creating forms, quizzes, and polls. A critical arbitrary file…
User Profile Builder: WordPress Membership Plugin
User Profile Builder is a WordPress plugin with over 40,000 active installations, used for managing user registration and profiles. A critical authentication…
UpdraftPlus: WordPress Backup Plugin with Authentication Bypass Vulnerability
UpdraftPlus is a popular WordPress backup plugin. It has a high-severity authentication bypass vulnerability (CVE-2026-10795) that may have been used as an…
TrustPulse: Compromised WordPress Social Proof Plugin
TrustPulse is a WordPress plugin for social proof notifications, owned by Awesome Motive. Its JavaScript was tampered with for about 25 minutes…
PushEngage: Compromised WordPress Push Notification Plugin
PushEngage is a WordPress plugin for push notifications, acquired by Awesome Motive. Its JavaScript files were tampered with to plant backdoors on…
OptinMonster: Compromised WordPress Lead Generation Plugin
OptinMonster is a WordPress plugin for lead generation and email marketing, owned by Awesome Motive. Its JavaScript was tampered with for about…
Gravity SMTP: WordPress SMTP Plugin
Gravity SMTP is a WordPress plugin used for configuring SMTP email settings and integrating with third-party email services. It is installed on…