Skip to content

WP Threat News

Category
Tag
Reset

Filtered by category: WordFence, tag: wordpress security × Clear

WordFence

Wordfence Argus: Moving Beyond Human Research Capability

Matched: WordPress

Wordfence has revealed Argus, an autonomous AI agent built for aggressive WordPress vulnerability hunting. The tool recently discovered major vulnerabilities in popular themes and has more findings in the disclosure pipeline. Argus combines LLMs, prompt engineering, orchestration, and traditional programming. It is model-agnostic, allowing quick pivoting between AI models. Wordfence says Argus already exceeds human research pace and is designed to find critical vulnerabilities before threat actors do.

WordFence

600,000 WordPress Sites Affected by Arbitrary File Upload Vulnerability in Forminator Forms WordPress Plugin

Matched: WordPress

A critical unauthenticated arbitrary file upload vulnerability was discovered in the Forminator Forms WordPress plugin, affecting over 600,000 active installations. The flaw, reported to Wordfence on July 14, 2026, allows attackers to upload files without authentication, posing significant security risks to affected sites. Users are advised to update the plugin promptly.