A security vulnerability has been identified in the User Profile Builder plugin for WordPress, impacting all versions up to and including 3.16.4. This flaw allows unauthenticated users (people not logged into your site) to bypass standard login protections and access your site’s main Administrator account, giving them full administrative control ...
Continue reading
A security flaw tracked as CVE-2026-15341 has been found in the User Session Synchronizer plugin for WordPress, affecting all versions of the plugin up to and including 1.4.0.This is an authentication bypass vulnerability, meaning unauthenticated attackers can take full control of any user account on a WordPress site running the affected plugin, ...
Continue reading
A security vulnerability has been found in the 6Storage Rentals plugin for WordPress, affecting all versions up to and including 2.27.0.
This flaw allows anyone without an existing account on your WordPress site to log in as any registered user, including site administrators, by only submitting that user's email address. No valid login ...
Continue reading
A popular WordPress plugin used to add secure multi-file upload features to Contact Form 7 forms has a critical security flaw affecting all versions up to and including 1.0.4. The flaw lets any visitor to your site, even someone who is not logged into your WordPress dashboard, delete arbitrary files stored on your web server. This happens because ...
Continue reading
