Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math has confirmed that certain copies of its SEO PRO plugin version 3.0.123 were compromised with malware during a narrow update window in mid October 2026.
Tag
wordfence
All posts in this stream, newest first.
Wordfence Bug Bounty Program Logged 1,066 Vulnerability Submissions in June 2026
Wordfence's June 2026 report shows its bug bounty program remains a steady pipeline of WordPress vulnerability discoveries, with researcher submissions triaged and responsibly disclosed to plugin and theme vendors.
Critical libheif Flaw Lets Attackers Hijack Servers via iPhone Photos
Wordfence Argus researchers uncovered a critical, CVSS 9.8 vulnerability in libheif, a widely used library for processing HEIC images from iPhones, and demonstrated real code execution on a WordPress deployment.
Critical Auth Bypass Found in WPMU DEV Dashboard Plugin
Wordfence's Argus research team discovered a critical authentication bypass in the WPMU DEV Dashboard plugin, installed on an estimated 350,000 sites, that can let unauthenticated attackers gain administrator access.
Critical Privilege Escalation Flaw Found in Pods WordPress Plugin
Wordfence disclosed an unauthenticated privilege escalation vulnerability in the Pods plugin, which is active on more than 100,000 WordPress sites and can lead to full site takeover.
Wordfence Bug Bounty Program Logged 1,288 Submissions in April 2026
Wordfence's monthly report shows its bug bounty program processed nearly 1,300 vulnerability submissions in April, as researchers continue to help harden the WordPress ecosystem.