CVE-2026-18072

cvss 9.8

A hidden backdoor in this plugin lets attackers bypass login screens and take full control of your WordPress site.

Patch now

why it matters — synthesized by an LLM from the sources below

signal timeline

Nothing is referencing this right now. Feeds are snapshots of the present, so a quiet timeline means quiet today — not that nothing ever happened.

first seen 20h ago · last seen 18h ago

intelyard daily

One short email each weekday: what mattered in tech, written from source data and checked by a human. No account needed, one-click unsubscribe, and we never sell or share the address.