Filtered by category: Tech Radar, tag: patch × Clear
Two major security flaws are affecting more than six million WordPress websites
Matched: WordPress
Wordfence has disclosed two critical vulnerabilities in popular WordPress plugins Elementor Pro and Super Forms, putting over six million websites at risk. Both flaws allow unauthenticated attackers to upload executable files, enabling remote code execution. Tracked as CVE-2026-32475 and CVE-2026-14894, each carries a 9.8/10 severity score. Both have been patched, but exploitation attempts have already exceeded 440,000 combined. Users are urged to update immediately.