RuntimeRebel — #WordPress

Chinese-Speaking Operators Target Philippine Nuclear and Naval Assets

Tue, 01 Sep 2026 02:44:13 GMT

Chinese-speaking threat actors targeted the Philippines Nuclear Agency and naval contractors, exploiting known vulnerabilities in ownCloud and WordPress.

miniOrange SAML SSO Auth Bypass Exploited in WordPress Attacks

Tue, 25 Aug 2026 08:31:42 GMT

Hackers exploit two critical authentication bypasses in miniOrange SAML 2.0 Single Sign On WordPress plugin to gain admin access. Immediate patching is vital.

CVE-2026-32475: Elementor Pro Unauthenticated RCE Flaw

Thu, 20 Aug 2026 08:26:43 GMT

A critical flaw, CVE-2026-32475, in Elementor Pro allows unauthenticated attackers to upload PHP files and execute code, affecting versions <= 4.2.1.

BdThemes WordPress Plugin Supply Chain Attack Creates Rogue Admins

Tue, 11 Aug 2026 08:45:01 GMT

A supply chain attack on BdThemes WordPress plugins exploited an XSS vulnerability, creating stealthy rogue admin accounts and webshells.

CVE-2026-64638: WordPress Pre-Auth XSS Leads to PHP RCE

Fri, 07 Aug 2026 16:42:22 GMT

A pre-authentication reflected XSS (CVE-2026-64638) in WordPress can be chained for PHP code execution. Patch immediately.

CVE-2026-60137: WordPress Core SQL Injection to RCE — Patch Now

Sun, 02 Aug 2026 02:55:48 GMT

CISA warns of active exploitation for CVE-2026-60137, a WordPress Core SQL Injection vulnerability chaining to RCE for unauthenticated attackers.

WordPress Core RCE via CVE-2026-63030 — wp2shell Mitigation Guide

Tue, 21 Jul 2026 17:23:43 GMT

Attackers are exploiting critical wp2shell vulnerabilities in WordPress Core to deploy persistent webshells. Learn how to detect and secure your servers.

WP2Shell: WordPress RCE via Chained CVE-2026-60137 & CVE-2026-63030

Tue, 21 Jul 2026 02:54:17 GMT

WP2Shell exploits CVE-2026-60137 and CVE-2026-63030 to achieve remote takeover on millions of WordPress sites. Immediate patching is critical.

CVE-2026-63030: WordPress Core SQLi Leads to Unauth RCE

Mon, 20 Jul 2026 21:15:06 GMT

Critical SQL injection vulnerability (CVE-2026-63030) in WordPress Core enables unauthenticated remote code execution. Active exploitation confirmed.

WordPress RCE and SonicWall Zero-Days: Weekly Threat Intel Update

Mon, 20 Jul 2026 14:11:23 GMT

Active exploitation of WordPress RCE and SonicWall zero-day vulnerabilities highlights critical risks for internet-facing systems. Learn how to mitigate.

WP2Shell Vulnerabilities CVE-2026-60137 & CVE-2026-63030 Exploited

Mon, 20 Jul 2026 06:49:53 GMT

WordPress sites face active exploitation via WP2Shell vulnerabilities CVE-2026-60137 and CVE-2026-63030. Learn the technical details and mitigation steps.

WordPress wp2shell RCE: Public Exploits Released for Core Flaws

Sat, 18 Jul 2026 20:51:39 GMT

Public exploits for wp2shell RCE flaws in WordPress Core are now available. Learn how to detect, mitigate, and patch these critical vulnerabilities immediately.

WordPress Core RCE wp2shell: Versions 6.9 and 7.0 Vulnerable

Sat, 18 Jul 2026 02:36:35 GMT

Unauthenticated attackers can achieve RCE on WordPress 6.9 and 7.0 core installations via the wp2shell flaw. Learn how to secure your site today.

ACSC Warns of Global Campaign Targeting Vulnerable CMS Platforms

Sat, 11 Jul 2026 16:59:48 GMT

The ACSC warns of a global campaign targeting WordPress, Joomla, and Drupal. Learn how to identify web shells and secure your CMS against automated attacks.

WordPress Formidable Forms Abused to Distribute Malicious PDF Files

Mon, 29 Jun 2026 05:42:25 GMT

Attackers are leveraging the WordPress Formidable Forms plugin to host malicious PDF documents, bypassing security filters to deliver phishing and malware.

ShapedPlugin Supply Chain Attack: WordPress Pro Plugins Backdoored

Tue, 23 Jun 2026 00:57:15 GMT

Attackers compromised ShapedPlugin's distribution pipeline to inject backdoors into Pro WordPress plugins. Learn how to detect and remediate this supply chain threat.

Gravity SMTP Flaw Exploited: WordPress Data Harvest & Remediation

Mon, 22 Jun 2026 17:38:41 GMT

Attackers are actively exploiting a flaw in the Gravity SMTP WordPress plugin to exfiltrate sensitive data, including API keys and server info.

CVE-2026-4020: Gravity SMTP Exploit Exposes WordPress API Keys

Sat, 20 Jun 2026 12:44:14 GMT

Unauthenticated attackers are exploiting CVE-2026-4020 in the Gravity SMTP WordPress plugin to extract API keys, secrets, and OAuth tokens from 100,000 sites.

CVE-2024-49403: Gravity SMTP Information Disclosure Patch Guidance

Sat, 20 Jun 2026 05:36:09 GMT

Exploitation of CVE-2024-49403 in the Gravity SMTP WordPress plugin allows unauthenticated actors to steal SMTP credentials. Learn how to secure your site now.

OptinMonster 2.6.5 Update: Managing CDN Supply Chain Attack Risks

Mon, 15 Jun 2026 17:46:01 GMT

Learn how the OptinMonster CDN supply chain attack compromised over 1 million WordPress sites and how to mitigate the risk of malicious script injection.

CVE-2024-3300: Critical Everest Forms Pro Bypass Leads to Site Takeover

Sat, 06 Jun 2026 16:30:32 GMT

Hackers are actively exploiting an authentication bypass in the Everest Forms Pro WordPress plugin (CVE-2024-3300). Update immediately to prevent takeover.

WordPress Sites Targeted via Kirki and Burst Statistics Vulnerabilities

Wed, 03 Jun 2026 13:48:48 GMT

Attackers are exploiting unauthenticated stored XSS in Kirki and Burst Statistics plugins to achieve privilege escalation and website takeover.

CVE-2026-8732: WP Maps Pro Admin Creation Vulnerability Exploited

Mon, 01 Jun 2026 21:15:33 GMT

Critical vulnerability [CVE-2026-8732] in WP Maps Pro allows unauthenticated attackers to create admin accounts, leading to WordPress site takeovers. Patch immediately.

WordPress Sites Targeted by Malware Using Steam Profile Dead-Drops

Mon, 01 Jun 2026 18:06:43 GMT

Over 2,000 WordPress sites compromised in a campaign hiding C2 resolution data within Steam Community profiles. Technical breakdown of the evasion tactics.

CVE-2024-10642: WP Maps Pro Exploited to Create WordPress Admin Accounts

Sun, 31 May 2026 16:31:35 GMT

Attackers are exploiting a critical privilege escalation flaw in the WP Maps Pro WordPress plugin to create rogue admin accounts without authentication.

Funnel Builder Plugin Exploited for WooCommerce Checkout Skimming

Sat, 16 May 2026 20:20:35 GMT

Attackers are exploiting a vulnerability in the Funnel Builder WordPress plugin to inject skimming scripts and steal payment data from WooCommerce sites.

Funnel Builder WordPress Plugin Exploited for Credit Card Skimming

Fri, 15 May 2026 20:31:22 GMT

Critical vulnerability in Funnel Builder WordPress plugin actively exploited to inject credit card skimming JavaScript into WooCommerce checkout pages.

CVE-2024-7109: Burst Statistics WordPress Plugin Auth Bypass Exploited

Fri, 15 May 2026 00:52:51 GMT

Hackers are actively exploiting CVE-2024-7109, a critical authentication bypass in Burst Statistics WordPress plugin, to gain admin access. Patch immediately.

WordPress Quick Page/Post Redirect Backdoor: Arbitrary Code Injection

Thu, 30 Apr 2026 00:51:16 GMT

A dormant backdoor in the Quick Page/Post Redirect WordPress plugin allowed arbitrary code injection for five years on over 70,000 sites. Learn mitigation.

CVE-2024-52317: Critical File Upload Bug in Breeze Cache — Patch Now

Fri, 24 Apr 2026 00:46:36 GMT

Attackers are actively exploiting a critical unauthenticated file upload vulnerability (CVE-2024-52317) in the Breeze Cache WordPress plugin.

Critical RCE Threats: Confluence OGNL & Exchange Server Patching

Thu, 23 Apr 2026 05:06:17 GMT

Runtime Rebel analyzes critical RCE vulnerabilities affecting Atlassian Confluence and Microsoft Exchange Server, alongside a high-severity SQLi in WP Reset.

Ninja Forms RCE via Arbitrary File Upload: Mitigation Guide

Wed, 08 Apr 2026 12:28:42 GMT

Hackers are actively exploiting a critical Ninja Forms vulnerability to upload arbitrary files and achieve RCE. Learn how to secure your WordPress site now.

Smart Slider 3 Vulnerability: Patch CVE-2024-11116 File Read Flaw

Sun, 29 Mar 2026 16:13:24 GMT

A file read vulnerability in Smart Slider 3 affects over 800,000 WordPress sites. Authenticated users can access sensitive server files via CVE-2024-11116.

Elementor Ally Plugin SQLi: Unauthenticated Data Theft Risk

Wed, 11 Mar 2026 20:13:50 GMT

An unauthenticated SQL injection vulnerability in the Elementor Ally WordPress plugin affects over 400,000 sites, risking sensitive data exposure.

WordPress User Registration & Membership Plugin: Admin Account Exploit

Thu, 05 Mar 2026 20:16:17 GMT

Critical vulnerability in WordPress User Registration & Membership plugin actively exploited to create unauthorized admin accounts.