WordPress

Everything Crypt Weekly has reported about WordPress: 3 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Update Abandoned Cart Pro to Fix Critical SQL Injection Allowing Remote Admin Control

Oct 14, 2026

A critical flaw in the Abandoned Cart Pro plugin allows attackers to seize full control of WordPress sites without logging in.

Vulnerabilities

Update Equadio to 1.1.5 to Fix Critical CVE-2026-62087 PHP Injection

Oct 11, 2026

Unauthenticated attackers can exploit CVE-2026-62087 in Equadio versions 1.1.4 and earlier to inject malicious PHP objects.

Vulnerabilities

Upgrade Axiomthemes Balance Past 1.12.0 to Block CVSS 9.8 Remote Code Execution

Oct 10, 2026

Sites running Axiomthemes Balance versions 1.12.0 or earlier face severe risk from CVE-2026-93945, a deserialization issue allowing remote code execution.