Vulnerability (CVE)
Researchers disclosed a critical flaw in the Elementor Pro WordPress plugin, tracked as CVE-2026-32475 with a CVSS score of 9.0, in which the Forms module's File Upload field runs its extension check and file-move step in two separate loops with different...
U.S. government agencies warned that threat actors are using AI to write exploit scripts against internet-exposed Siemens S7 Series PLCs used in water, energy, and manufacturing, finding targets through legitimate scanning services such as Censys and...
Wordfence reports it has blocked more than 250,000 exploit attempts against CVE-2026-14894 in Super Forms and over 190,000 against CVE-2026-32475 in Elementor Pro, both arbitrary file upload flaws that let an attacker write a PHP web shell and execute code...