Attackers are exploiting CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload PHP web shells and gain remote code execution.
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and ...
The popular Dynamic Pricing and Discounts plugin from Envato can be exploited by unauthenticated attackers. A pair of security vulnerabilities in the WooCommerce Dynamic Pricing and Discounts plugin ...