WordPress

Everything Sandbox Gazette has reported about WordPress: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Can world-readable nonce leak in 10Web Booster allow unauthenticated code execution on WordPress?

A critical flaw in the 10Web Booster plugin allows attackers to upload executable files and run code on WordPress sites without logging in.

Oct 15, 2026

Vulnerabilities

How can WPCOM Member flaws let hackers log in as admins using social IDs?

The WPCOM Member plugin for WordPress allows unauthenticated attackers to impersonate any user, including administrators, by bypassing security controls in versions up to 1.7.27.

Oct 10, 2026