SecurityThe Hacker Newsabout 2 hours ago
WordPress Plugin Flaws Enable Site Takeover or RCE
1 min read
Critical flaws in WordPress plugins WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP enable authentication bypass, account takeover, and arbitrary code execution. Pods CVE-2026-19598 (CVSS 9.8) allows unauthenticated privilege escalation to Administrator. GiveWP CVE-2026-82222 (CVSS 10.0) permits remote code execution via PHP object injection.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
