Pro Security WordPress users beware - this popular plugin has been hijacked to push potential malware News By Sead Fadilpašić last updated July 16, 2025 ...

A critical vulnerability has been reported in WPML — a multilingual WordPress plugin with more than a million installations globally — that allows remote code execution on affected WordPress ...

Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack Malicious updates available from WordPress.org create attacker-controlled admin account.