Ninja Forms plugin flaw exploited to hack WordPress sites

By Bill Toulas · BleepingComputer · Tuesday, 6 October 2026 at 21:00 (2h ago) · Original article ↗

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

On the first day of the Pwn2Own Ireland 2026 competition, security researchers hacked the Samsung Galaxy S26 twice and earned $388,500 after exploiting 32 zero-days. [...]

BleepingComputer 3h ago

Security

Hackers obtain counterfeit TLS certificates for Google and other large services

Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.

Ars Technica 3h ago

Security

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate…

The Hacker News 4h ago

Ninja Forms plugin flaw exploited to hack WordPress sites

More Security & Privacy

Hackers exploit 32 zero-days on first day of Pwn2Own Ireland

Hackers obtain counterfeit TLS certificates for Google and other large services

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan