Cyber
Two major PHP vulnerabilities put massive chunks of the web in danger
Newly discovered flaws in the widely used programming language threaten millions of websites and platforms across the global internet.
Tag
#WordPress
The latest news, analysis and stories about WordPress — TECC.UZ.
12 articles
Cyber
Popular WordPress SEO Plugin Rank Math Compromised with Backdoors
Last week, some downloads of the Rank Math PRO WordPress plugin from the official website were compromised in a supply-chain attack that planted hidden backdoors.
Cyber
Elementor WordPress Flaw Lets Attackers Create Admin Accounts
A newly disclosed CSRF vulnerability in the popular Elementor plugin could allow unauthenticated attackers to create admin accounts on WordPress sites.
Cyber
Hackers start exploiting critical WordPress flaw for code execution
Threat actors have moved from probing vulnerable WordPress sites to actively exploiting CVE-2026-87902 to execute shell commands.
Cyber
Chinese hackers exploit WordPress, Zyxel flaws to steal govt data
A threat actor is targeting government and enterprise networks by exploiting known vulnerabilities in ZyXEL switches and WordPress.
Cyber
WordPress Click2Shell flaw lets hackers execute PHP on the server
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery vulnerability dubbed Click2Shell.
Cyber
Malicious Admin Menu Editor Pro Plugin Backdoors 1,500 WordPress Sites
A compromise of the Admin Menu Editor Pro plugin maintainer's website led to malicious updates creating hidden admin accounts across thousands of WordPress sites.
Cyber
Hackers Target WordPress Sites via WooCommerce Plugin
Cybercriminals are actively exploiting a critical vulnerability in a popular WordPress plugin to upload PHP backdoors to target sites.
Cyber
Critical Elementor Pro Flaw Exploited to Take Over WordPress Sites
A newly patched critical vulnerability in the Elementor Pro WordPress plugin is being actively exploited to deliver webshells and execute commands.
IT
Critical Avada WordPress Theme Flaw Enables Zero-Click RCE
A critical vulnerability chain in the popular Avada WordPress theme allows unauthenticated attackers to execute arbitrary code on servers.
Cyber
Hackers Target WordPress Sites in miniOrange Auth Bypass Attacks
Threat actors are actively exploiting critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress.
IT
WordPress.com targets the next generation of web creators with a free student plan
The new educational initiative lets teachers offer their students free domains, plugin support, and professional website-building tools.