The WordPress WP HTML Mail plugin for personalized emails is vulnerable to code injection and phishing due to XSS. More than 20,000 WordPress sites are vulnerable to malicious code injection, phishing ...

Security vulnerabilities with critical risk ratings are present in widespread WordPress plugins. One is already being attacked.

Today it was disclosed that the popular WordPress contact form called Ninja Forms patched two vulnerabilities, affecting over 1 million WordPress installations. This represents another in a growing ...

An advisory was issued for a WordPress plugin vulnerability that can enable unauthenticated attackers to inject malicious ...

The payment-card stealer differs from typical malware targeting WordPress-based e-commerce environments. Credit-card-stealing criminals have set their sights on the WordPress plugin known as ...