Ninja Forms’ file upload add-on has its second serious security flaw this year. A newly disclosed vulnerability — CVE-2026-92820, rated CVSS 8.1 (High) — lets attackers with no login read,…
If your WordPress site runs the wpForo Forum plugin, check your version today. A high-severity SQL injection vulnerability — CVE-2026-1581 — is under active exploitation right now, and attackers don't…
On October 1, 2026, security firm Sucuri disclosed a WordPress backdoor with an unsettling property: deleting it doesn't kill it. Codenamed SC (after the "SC_" markers found in its injected…
Nobody thinks their small website will get hacked. But here's the uncomfortable truth: attackers aren't picking targets by hand. Automated bots scan every IP address on the internet every day,…