Vulnerability intelligence
CVE-2026-8181
A 24-hour cooldown on all plugin releases. AI-assisted code review scanning 78,000 plugins. WordPress.org is building the security infrastructure it should have had a decade ago — because the alternative is losing the web.
WordPress
2026
What WebPulse reported · 3 analyses
WordPress Just Admitted Its Plugin Ecosystem Needs AI to Police It. They Call It 'Protect The Shire.'
A 24-hour cooldown on all plugin releases. AI-assisted code review scanning 78,000 plugins. WordPress.org is building the security infrastructure it should have
June 14, 2026
UpdraftPlus: 3 Million WordPress Sites. Unauthenticated Admin RCE. No Login Required.
The most popular WordPress backup plugin gave unauthenticated attackers full admin access. Wordfence blocked 8,172 exploit attempts in 24 hours. The plugin supp
June 13, 2026
June 2026: Six CVSS 9.8 Vulnerabilities. 1.14 Million WordPress Sites.
Six critical vulnerabilities actively exploited at the same time. 29,300+ attacks per day on one plugin alone. A premium plugin supply-chain compromised. The Wo
June 9, 2026
Related vulnerabilities