WordPress security news · Threat Recapvendors/wordpress.htmlSecurity news, advisories and CVEs for WordPressMon, 19 Oct 2026 12:28:44 GMT Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCEhttps://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.htmlvmd4sjMon, 12 Oct 2026 09:02:14 GMTThe Hacker News (+2 more sources). A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated…VulnerabilityZero-day Ninja Forms plugin flaw exploited to hack WordPress siteshttps://www.bleepingcomputer.com/news/security/ninja-forms-plugin-flaw-exploited-to-hack-wordpress-sites/fmdw2Tue, 06 Oct 2026 21:00:27 GMTBleepingComputer. Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. [...]Vulnerability WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memoryhttps://thehackernews.com/2026/10/wordpress-backdoor-rebuilds-itself.htmlba0ilfThu, 01 Oct 2026 14:37:35 GMTThe Hacker News. Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC…Malware TIKTOUK: Tracing a WordPress Credential Collection Toolkithttps://www.levelblue.com/blogs/spiderlabs-blog/tiktouk-tracing-a-wordpress-credential-collection-toolkit1po80scThu, 01 Oct 2026 12:41:05 GMTLevelBlue SpiderLabs. TIKTOUK brings together WordPress probing, collection of exposed configuration data, recovery of encrypted email credentials, and JavaScript secret scanning. Its two Python components and Go-based Linux crawler turn website responses into structured results…Research [webapps] WordPress 7.0.2 - Path Travesalhttps://www.exploit-db.com/exploits/526901wcy2aiThu, 01 Oct 2026 00:00:00 GMTExploit-DB. WordPress 7.0.2 - Path Travesal Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitationhttps://www.greynoise.io/blog/open-season-on-kapibala-attacker-steals-government-records-wordpress-exploitation1hbzlyhMon, 21 Sep 2026 00:00:00 GMTGreyNoise. GreyNoise has been tracking malicious use of an IP address since early June 2026 due to its frequent use in scans and attacks against a variety of technologies. We detail a few of the more notable intrusions we observed including the theft of more than 18,000…Research