Pi-hole, a popular network-level ad-blocker, has disclosed that donor names and email addresses were exposed through a security vulnerability in the GiveWP WordPress donation plugin.

Rogue Plugin Used as Malware Host One of the most notable findings was a fake WordPress plugin named “WordPress Core.” While appearing legitimate on the surface, its components included JavaScript ...

Malware Discovered In Gravity Forms WordPress Plugin Patchstack published an advisory on a supply chain attack affecting Gravity Forms that enables remote code execution on affected websites.