⤷ Title: Critical Bricksforge Vulnerability Under Active Attack
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 06:04:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bricksforge #CVE_2026_85097 #cybersecurity #WordPress
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 06:04:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bricksforge #CVE_2026_85097 #cybersecurity #WordPress
Information Security News
Critical Bricksforge Vulnerability Under Active Attack
A severe critical vulnerability has been unequivocally identified within the WordPress ecosystem. Malicious actors are currently attempting to exploit this flaw to surreptitiously upload executabl…
⤷ Title: Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 00:49:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backuply #CVE_2026_93953 #sql injection #Wordfence #wordpress
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 00:49:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Backuply #CVE_2026_93953 #sql injection #Wordfence #wordpress
Daily CyberSecurity
Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability
TL;DR Wordfence disclosed a high-severity SQL injection vulnerability (CVE-2026-93953) in the Backuply WordPress plugin on October 15, 2026. The flaw allows authenticated subscribers to elevate th…
⤷ Title: Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 04:15:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_111862 #Rank Math SEO PRO #supply chain attack #Wordfence #wordpress
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 04:15:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_111862 #Rank Math SEO PRO #supply chain attack #Wordfence #wordpress
Daily CyberSecurity
Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123
TL;DR Rank Math SEO PRO for WordPress suffered a critical supply-chain compromise (CVE-2026-111862) that is actively exploited in the wild through trojanized version 3.0.123 packages. Attackers in…
⤷ Title: TryHackMe Write-ups: Bricks Heist: The Full Story
════════════════════════
𐀪 Author: Elimane NDOYE
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 15:06:25 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #wordpress
════════════════════════
𐀪 Author: Elimane NDOYE
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 15:06:25 GMT
════════════════════════
⌗ Tags: #tryhackme #cybersecurity #wordpress
Medium
TryHackMe Write-ups: Bricks Heist: The Full Story
16 oct. 2026 · Elimane NDOYE
⤷ Title: W1seGuy : le flag n’a jamais été chiffré
════════════════════════
𐀪 Author: Elimane NDOYE
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 17:13:29 GMT
════════════════════════
⌗ Tags: #xor #ctf_writeup #tryhackme #wordpress_cve #cybersécurité
════════════════════════
𐀪 Author: Elimane NDOYE
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 17:13:29 GMT
════════════════════════
⌗ Tags: #xor #ctf_writeup #tryhackme #wordpress_cve #cybersécurité
Medium
W1seGuy : le flag n’a jamais été chiffré
17 oct. 2026 · @Elimane NDOYE
⤷ Title: Critical WordPress Theme My Login Account Takeover Vulnerability
════════════════════════
𐀪 Author: Red Byte
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 20:35:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #infosec #hacking #wordpress
════════════════════════
𐀪 Author: Red Byte
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 20:35:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability #infosec #hacking #wordpress
Medium
Critical WordPress Theme My Login Account Takeover Vulnerability
🚨 PoC Published: Critical WordPress Theme My Login Account Takeover Vulnerability — CVE-2026-89079
⤷ Title: UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 01:51:33 +0000
════════════════════════
⌗ Tags: #Data Leak #backdoor #Data Breach #supply chain attack #TeamUpdraft #UpdraftCentral #UpdraftPlus #wordpress
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 01:51:33 +0000
════════════════════════
⌗ Tags: #Data Leak #backdoor #Data Breach #supply chain attack #TeamUpdraft #UpdraftCentral #UpdraftPlus #wordpress
Daily CyberSecurity
UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites
TL;DR TeamUpdraft says attackers likely accessed its customer database over the weekend of 17-18 October. The UpdraftPlus data breach included UpdraftCentral connection keys. Within hours, researc…
⤷ Title: Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 15:20:53 +0000
════════════════════════
⌗ Tags: #Supply Chain Security #Rank Math #supply chain attack #WordPress
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 15:20:53 +0000
════════════════════════
⌗ Tags: #Supply Chain Security #Rank Math #supply chain attack #WordPress
SecurityWeek
Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack
Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.
⤷ Title: RTFM: TeamUpdraft (UpdraftPlus) and WordPress Hack on the RTFM Blog
════════════════════════
𐀪 Author: Arseny Zinchenko (setevoy)
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 19:18:52 GMT
════════════════════════
⌗ Tags: #hacking #php #security #wordpress
════════════════════════
𐀪 Author: Arseny Zinchenko (setevoy)
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 19:18:52 GMT
════════════════════════
⌗ Tags: #hacking #php #security #wordpress
Medium
RTFM: TeamUpdraft (UpdraftPlus) and WordPress Hack on the RTFM Blog
A detailed analysis of the hack on the WordPress blog and RTFM caused by the TeamUpdraft data leak, an analysis of the backdoor, and a compl
⤷ Title: A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
════════════════════════
𐀪 Author: Bhargav Buddh
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:50:11 GMT
════════════════════════
⌗ Tags: #wordpress #cybersecurity #information_security #hacking #web_application_security
════════════════════════
𐀪 Author: Bhargav Buddh
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 10:50:11 GMT
════════════════════════
⌗ Tags: #wordpress #cybersecurity #information_security #hacking #web_application_security
Medium
A WordPress Website Was Receiving Unexpected Comments. Then We Found Hidden Code in the Theme.
Investigating suspicious activity, unexpected external links, and hidden SEO spam in a WordPress website.
⤷ Title: Duplicator WordPress Plugin Patched for High-Severity PHP Object Injection Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 00:01:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_82814 #Duplicator #PHP Object Injection #Wordfence #wordpress
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 00:01:00 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_82814 #Duplicator #PHP Object Injection #Wordfence #wordpress
Daily CyberSecurity
Duplicator WordPress Plugin Patched for High-Severity PHP Object Injection Vulnerability
TL;DR Wordfence researchers discovered an unauthenticated PHP Object Injection vulnerability (CVE-2026-82814) in the Duplicator WordPress plugin and Duplicator Pro. The flaw allows attackers to pl…
⤷ Title: PHP sürümlerinde RCE(php2shell) açığı
════════════════════════
𐀪 Author: Hüseyin ÖZKILIÇ
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 01:04:20 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #drupal #wordpress #php #joomla
════════════════════════
𐀪 Author: Hüseyin ÖZKILIÇ
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 01:04:20 GMT
════════════════════════
⌗ Tags: #rce_vulnerability #drupal #wordpress #php #joomla
Medium
PHP sürümlerinde RCE(php2shell) açığı
PHP’de bulunan ve PHP2Shell adı verilen iki kritik güvenlik açığı, WordPress, Drupal, Joomla ve MediaWiki gibi PHP tabanlı sistemleri…
⤷ Title: The PHP Vulnerability Was Exploited 4 Days Before Anyone Announced It
════════════════════════
𐀪 Author: Andrus
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 06:06:13 GMT
════════════════════════
⌗ Tags: #web_development #zero_day #infosec #wordpress #php
════════════════════════
𐀪 Author: Andrus
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 06:06:13 GMT
════════════════════════
⌗ Tags: #web_development #zero_day #infosec #wordpress #php
Medium
The PHP Vulnerability Was Exploited 4 Days Before Anyone Announced It
I have a WordPress project running on PHP 8.3.6, and on Wednesday the version I need to be on became 8.3.36. That is the whole of my…
⤷ Title: LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:44:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_113499 #CVE_2026_113500 #CVE_2026_113501 #LiteSpeed Cache #Stored XSS #WordPress Plugin #wpscan
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:44:17 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_113499 #CVE_2026_113500 #CVE_2026_113501 #LiteSpeed Cache #Stored XSS #WordPress Plugin #wpscan
Daily CyberSecurity
LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
TL;DR LiteSpeed Cache 7.9.2, released October 20, 2026, fixes three LiteSpeed Cache vulnerabilities disclosed by WPScan on October 23. Two flaws let unauthenticated commenters plant stored XSS tha…
⤷ Title: Your PHP Server Could Be Exposed: What Every Developer Needs to Know About PHP2Shell
════════════════════════
𐀪 Author: Syed Shaheer Hussain
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:38:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #rce_vulnerability #wordpress #php
════════════════════════
𐀪 Author: Syed Shaheer Hussain
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 10:38:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #rce_vulnerability #wordpress #php
Medium
Your PHP Server Could Be Exposed: What Every Developer Needs to Know About PHP2Shell
Imagine opening a website, sending a request, and unknowingly triggering a weakness that could allow an attacker to run commands on the…
⤷ Title: Discovering and Responsibly Disclosing a Path Traversal Vulnerability in a WordPress Plugin
════════════════════════
𐀪 Author: Yusif Mammadzada
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:40:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #technology #azerbaijan #wordpress
════════════════════════
𐀪 Author: Yusif Mammadzada
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:40:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #technology #azerbaijan #wordpress
Medium
Discovering and Responsibly Disclosing a Path Traversal Vulnerability in a WordPress Plugin
Hello everyone!
⤷ Title: The Software Behind Millions of Websites Is Under Attack_
════════════════════════
𐀪 Author: Yazdan Ahmadi
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:39:35 GMT
════════════════════════
⌗ Tags: #wordpress #technology #hacking #cybersecurity #php
════════════════════════
𐀪 Author: Yazdan Ahmadi
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:39:35 GMT
════════════════════════
⌗ Tags: #wordpress #technology #hacking #cybersecurity #php
Medium
The Software Behind Millions of Websites Is Under Attack_
Warnings had surfaced years earlier, but the discovery of serious attack methods triggered a chaotic race to release security fixes.
⤷ Title: Your WordPress Security Plugin Can’t Save You From This One
════════════════════════
𐀪 Author: 0xasmaa
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 18:02:00 GMT
════════════════════════
⌗ Tags: #vulnerability #infosec #php #php2shell #wordpress
════════════════════════
𐀪 Author: 0xasmaa
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 18:02:00 GMT
════════════════════════
⌗ Tags: #vulnerability #infosec #php #php2shell #wordpress
Medium
Your WordPress Security Plugin Can’t Save You From This One
How I read the vulnerable PHP source, triggered the OOM condition by hand, found the one-line patch and learned why the runtime is the…
⤷ Title: PHP Has a Problem, and It Could Affect More of the Internet Than You Think
════════════════════════
𐀪 Author: Sam Writes Security
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 11:02:40 GMT
════════════════════════
⌗ Tags: #hacking #vulnerability #wordpress #internet #php
════════════════════════
𐀪 Author: Sam Writes Security
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 11:02:40 GMT
════════════════════════
⌗ Tags: #hacking #vulnerability #wordpress #internet #php
Medium
PHP Has a Problem, and It Could Affect More of the Internet Than You Think
Two critical vulnerabilities in one of the web’s most widely used programming languages have triggered a global security response. Here’s…
⤷ Title: Attackers Were Exploiting a PHP Bug Days Before Anyone Else Knew It Existed
════════════════════════
𐀪 Author: Vortex 404
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 11:40:44 GMT
════════════════════════
⌗ Tags: #wordpress #devsecops #vulnerability #application_security #php
════════════════════════
𐀪 Author: Vortex 404
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 11:40:44 GMT
════════════════════════
⌗ Tags: #wordpress #devsecops #vulnerability #application_security #php
Medium
Attackers Were Exploiting a PHP Bug Days Before Anyone Else Knew It Existed
PHP2Shell isn’t a WordPress bug or a Drupal bug — it’s in PHP itself, and a “Hello World” app running on an affected version is vulnerable…