Everything BitShield News has reported about WordPress: 5 stories, newest first. Part of our Vulnerabilities coverage.
A severe SQL injection flaw in the Mang Board WordPress plugin exposes sites running versions up to 2.4.4 to potential database compromise, according to National Vulnerability Database records.
ThemeREX Stargaze versions up to 1.10 contain a critical CVE-2026-62051 flaw allowing unauthenticated PHP object injection, posing immediate risks to managed sites.
The NVD rates this flaw as critical, allowing attackers to bypass authentication checks and run server-side code on vulnerable sites.
The National Vulnerability Database rates CVE-2026-93933 as critical, exposing sites running ThemeREX Rosalinda versions up to 1.2.4 to object injection risks.
A critical vulnerability in the PPOM WooCommerce plugin allows attackers to delete server files and execute code without authentication, risking full site compromise.