Security AdvisoriesAugust 21, 2026One slug, seven editions: the miniOrange SAML SSO bug that let anyone log in as your WordPress admin
Security AdvisoriesAugust 19, 2026Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin
Security AdvisoriesAugust 12, 2026When a PNG Isn’t a PNG: WordPress Patches an Author-Level Imagick RCE
Security AdvisoriesJune 15, 2026Supply Chain Attack on OptinMonster, TrustPulse, and PushEngage: Tampered CDN Scripts Auto-Creating Rogue Admins
Security AdvisoriesApril 17, 2026Supply Chain Compromise: Trojanized Copy of WowShipping Pro Installs Hidden Remote Access Toolkit