Vulnerabilities
WordPress Cherry Plugin Path Traversal Allows Unauthenticated File Access
A high-severity flaw in the Cherry Plugin lets attackers download sensitive files like database credentials without logging in.
Read moreWordPress
Everything BlueTeam Insider has reported about WordPress: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Avada Builder Auth Flaw Lets Unauthenticated Users Permanently Delete Posts and Pages
CVE-2026-97670 allows unauthenticated users to execute arbitrary WordPress action hooks via form submissions, potentially destroying site content permanently.
Read more