FortiBleed 2.0 Exposes 40,573 Secrets, PHP2Shell Scanning Continues, and 26 Other Threats Detected
FortiBleed 2.0 uncovered 40,573 exposed credentials, while PHP2Shell scanning continues across 5 million WordPress sites.
wordpress
3 stories
Bricksforge RCE Exploit Enables Unauthenticated Remote Code Execution
A CVSS 10.0 vulnerability (CVE-2026-85097) in the Bricksforge WordPress plugin allows attackers to execute arbitrary PHP code without authentication.
WordPress Click2Shell vulnerability Enables Forced Theme Install and Remote Code Execution
The newly disclosed WordPress Click2Shell vulnerability lets attackers auto-install a theme via a crafted URL and, when chained with a vulnerable theme.