WordPress Yuzo Related Posts plugin vulnerability massively exploited.

Hackers are currently actively exploiting a vulnerability in the WordPress Related Posts plugin, which has 60,000+ active installations.

NinjaFirewall (WP Edition) adds PHP backtrace to email notifications.

Starting from version 3.8.3, NinjaFirewall (WP and WP+ Edition) will attach a PHP backtrace to some important email notifications sent to the administrator.

Another day, another zero-day: WordPress Social Sharing Plugin Social Warfare under attack.

A vulnerability in WordPress Social Sharing Plugin – Social Warfare is currently exploited.

Critical zero-day vulnerability fixed in WordPress Easy WP SMTP plugin.

The popular Easy WP SMTP plugin, which as 300,000+ active installations, was prone to a critical zero-day vulnerability.

Arbitrary file upload vulnerability in WordPress Ultimate Member plugin.

A critical vulnerability in the popular WordPress Ultimate Member plugin allows allows attackers to upload any files, including PHP backdoors.