Hackers Target Unpatched Wordpress Vulnerabilities, Risking Sites

WHO:

Techmeme - Cybersecurity companies are involved in reporting the exploitation of WordPress vulnerabilities.

TechCrunch - A cybersecurity researcher provided estimates regarding the number of affected websites.

WHAT:

Techmeme - Hackers are exploiting vulnerable versions of WordPress to take over websites.

TechCrunch - Two critical security flaws in WordPress' software have been identified, allowing hackers to remotely take over tens of millions of websites.

WHERE:

TechCrunch - The vulnerabilities affect websites running the WordPress blogging software globally.

WHEN:

Techmeme - WordPress patched two critical security flaws last week.

WHY:

TechCrunch - The exploitation of these vulnerabilities is due to the presence of unpatched versions of WordPress software.

HOW:

Techmeme - Hackers are breaking into websites by targeting unpatched vulnerabilities in WordPress.

(UPDATED July 20, 2026 18:38 UTC)

Cybersecurity companies are reporting that hackers are exploiting vulnerabilities in WordPress, which could allow them to take over tens of millions of websites worldwide. Two critical security flaws in the software have been identified, and the exploitation is largely due to the presence of unpatched versions of WordPress. Last week, WordPress released a patch to address these critical issues, but many sites remain at risk.