vendor

WordPress

Every Skillmate HackNews story about WordPress: flaws, patches and attacks, newest first.

Want to defend against threats like these? Get hands-on cybersecurity training at Skillmate

3 posts, newest first

#Vulnerabilities
#WebApps
#WordPress

Threat Actors Exploit New WordPress Race Condition

Threat actors have begun exploiting a high-severity unauthenticated race condition in WordPress, targeting the update process for remote code execution. The vulnerability or weakness The vulnerability is a race...

SkillmateOct 31, 2026

#WebApps
#Malware
#DataBreaches
Stolen UpdraftCentral keys used to backdoor WordPress sites
A threat actor breached TeamUpdraft's website, potentially compromising UpdraftCentral connection keys used to send commands to connected...
SkillmateOct 22, 2026
$WordPress SEO Plugin Rank Math PRO Hijacked with Self-Restoring Backdoor$
#WebApps
#Malware
#WordPress
WordPress SEO Plugin Rank Math PRO Hijacked with Self-Restoring Backdoor
A security notice from Rank Math revealed that copies of the paid Rank Math PRO plugin distributed between October 15 and 16 contained...
SkillmateOct 20, 2026

skillmate

Threat Actors Exploit New WordPress Race Condition

Stolen UpdraftCentral keys used to backdoor WordPress sites

WordPress SEO Plugin Rank Math PRO Hijacked with Self-Restoring Backdoor