CVE-2021-24139: Critical Vulnerability in 10Web Photo Gallery WordPress Plugin
CVE-2021-24139 is a critical vulnerability in the 10Web Photo Gallery WordPress plugin with a CVSS score of 9.8, exploited by the JadeProx…
Tag: WordPress
Hackers Exploit Unpatched Windmill Path Traversal Flaw CVE-2026-29059 to Read Server Files
A high-severity path traversal vulnerability in the open-source developer platform Windmill, tracked as CVE-2026-29059 (CVSS 7.5), is under active exploitation. The flaw…
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
A solo Russian-speaking threat actor known as "bandcampro" has been observed using Google's open-source Gemini CLI AI to control a botnet of…
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
A critical unauthenticated remote code execution vulnerability has been discovered in WordPress core, affecting versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1.…
Weekly Cybersecurity Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
This week's cybersecurity landscape is marked by a series of critical threats and vulnerabilities. Progress has urged ShareFile customers to shut down…
SHELLSTORM: Large-Scale Web Shell Access Brokerage Operation
SHELLSTORM is a large-scale operation that exploited 27 CVEs in WordPress plugins to deploy web shells on over 1.4 million domains. The…
CVE-2025-12352: Gravity Forms WordPress Plugin Vulnerability
A vulnerability in the Gravity Forms WordPress plugin exploited in a global CMS campaign for web shell deployment.
WPBookit WordPress Plugin
A WordPress plugin targeted in a global CMS exploitation campaign for web shell deployment.
Gravity Forms WordPress Plugin
A WordPress plugin for form building, targeted in a global CMS exploitation campaign for web shell deployment.
Ninja Forms WordPress Plugin
A WordPress plugin for form building, targeted in a global CMS exploitation campaign for web shell deployment.