cyber · Published brief

Critical WordPress plugin flaw puts 3.25 million sites at risk

A critical vulnerability in a WordPress plugin reportedly affects 3.25 million websites and could enable widespread exploitation.

By DoomRadar · Published on DoomRadar Sep 6, 2026, 10:07 AM UTC.

Why it matters

Mass exploitation could disrupt or compromise millions of websites.

Related source links

These links were collected with this event. Recorded source dates may reflect when a link was found. Article publication dates are shown only when available from the source. Open the originals for their full context.

3,25 millions de sites en danger : cette faille critique d'un plugin Wordpress risque de faire des dégâts ↗01net.com · Recorded source date: Sep 6, 2026, 10:01 AM UTC

AI-assisted, source-based analysis. Methodology · Report a correction

Connected by topic or specific details. Dates below are publication dates; the articles may describe separate events.

EARLIER READING

Active exploit targets WordPress backup plugin used by 3.25 million sites

A vulnerability in a WordPress backup plugin is reportedly being actively exploited, potentially exposing data from millions of websites.

Related details in the reporting
Sep 3, 2026, 4:41 PM UTC

Critical Cisco SD-WAN flaw is under active exploitation

Cisco says attackers are exploiting CVE-2026-76504, a critical authentication-bypass flaw in Catalyst SD-WAN Manager. The vulnerability can grant unauthenticated remote attackers administrator-level access, and CISA has urged covered organizations to apply fixes.

Related details in the reporting
Oct 2, 2026, 1:36 AM UTC

$320 million Bitcoin-linked exploit exposed a network flaw; most funds reportedly returned

New reports clarify that $320 million in Bitcoin disappeared after a network accepted funds that should not have existed, without attackers stealing private keys. The attackers reportedly returned almost all of the funds, highlighting a major protocol failure rather than a conventional key theft.

Related details in the reporting
Sep 8, 2026, 4:38 PM UTC

N-able releases hotfix for critical remote-code-execution flaw

N-able has released a hotfix for a critical vulnerability that could enable remote code execution. The supplied report provides no details on exploitation or affected scope.

Related details in the reporting
Sep 7, 2026, 1:27 PM UTC

More in Cyber & digital services → · Browse the event archive →