Threat Watch– active
All incidents
More on Threat Watch
More WordPress incidents
- AfD email breach: 345,000 addresses leaked via hacked WordPress site Medium · Breach
- PHP (PHP2Shell): Two critical RCE flaws in PHP under active exploitation (CVE-2026-109618, CVE-2026-109619) Critical · Patch now
- TeamUpdraft (UpdraftPlus/UpdraftCentral): website breach exposed connection keys used to install backdoor plugins on WordPress sites (no CVE) Critical · Breach
- Rank Math SEO PRO 3.0.123: malware distributed in some downloads via compromised update channel (Oct 15–16, 2026) High · Supply chain
- WordPress Core Remote File Inclusion Vulnerability (CVE-2026-87902) High · Patch now · Closed
- WordPress Core Interpretation Conflict Vulnerability (CVE-2026-63030) Critical · Patch now · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.