Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-29 16:25 UTC
  • Importiert: 2026-09-05 16:28 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: fcc58da3f598296180c3c767c0ca3741893d711b607f4205b654cdc7cf93d4cc
The Hacker News

Inhalt

Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.

The vulnerabilities, according to Wordfence and Patchstack, are listed below -

CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-76581

CRITICAL

9.8

CRITICAL

9.8

2026-08-28

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste