Everything RedTeam Monitor has reported about WordPress: 4 stories, newest first. Part of our Vulnerabilities coverage.
Attackers can inject malicious objects into the LearnPress plugin via checkout parameters, gaining critical access to WordPress sites without logging in.
A critical SQL injection flaw in the ELEX WooCommerce Advanced Bulk Edit plugin exposes user data in versions 1.5.3 and earlier.
The Equadio WordPress theme contains a severe vulnerability allowing remote code execution without authentication, posing immediate risks to users.
A critical flaw in the PPOM WooCommerce plugin allows unauthenticated attackers to delete server files and execute remote code on WordPress sites.