WordPress security articles, guides, and announcements.
On August 6, 2026, two critical CVEs landed against the same WordPress plugin on the same day. Both hit TrueBooker (Appointment Booking and Scheduler System), both scored CVSS 9.8, and both are a Word...
CVE-2026-14526 carries a CVSS score of 9.8 and needs no login at all. The plugin is AI Copilot - Content Generator, and every version up to and including 1.5.6 is affected. The fix shipped in 1.5.8, a...
Decoding a JWT is not verifying it. That distinction is the entire story of CVE-2026-8457, a critical authentication bypass in the WooCommerce - Social Login plugin, disclosed August 1, 2026. It carri...
On July 31, 2026, between 14:00 and 19:00 UTC, WPManageNinja's own update servers pushed backdoored builds of Fluent Forms Pro 6.2.7 and Ninja Tables Pro 5.2.11 to customer sites. This is one of the c...
July 2026 added 1,108 new WordPress vulnerabilities to our database, against 235 in June under the prior reporting methodology. That jump is real disclosure volume plus broader advisory aggregation la...
CVE-2026-15982 carries a CVSS score of 9.8 and needs no login. The flaw sits in a function called `aiomatic_call_google_ai_function`, part of Aimogen Pro, the "All-in-One AI Content Writer, Editor, Ch...
On July 7, 2026, researchers disclosed CVE-2026-12153, a missing authorization flaw in WP Learn Manager affecting every version up to and including 1.1.8. The CVSS score is 9.8, critical, unauthentica...
On July 7, 2026, two CVEs landed against the same plugin, Eventer, on the same day. One scored 7.5. The other scored 9.8. Neither number tells you what actually happened on a vulnerable site, because...
Three miniOrange plugins fixed critical, unauthenticated authentication bypass vulnerabilities inside eight days in July 2026. Every one of them scored 9.8 on CVSS. Every one let an attacker reach a W...
CVE-2026-13001 landed on July 14, 2026: a CVSS 9.8 unauthenticated arbitrary file upload vulnerability in Podlove Podcast Publisher, a WordPress plugin used to manage podcast feeds, episode metadata,...