WordPress CVE-2026-119977: Check Your Version and Logs
WordPress CVE-2026-119977 is on CISA’s exploited list. See which versions are fixed, block wp-content/upgrade and check your logs for signs of abuse.
Website security
-
-
BTCPay Server Hack: Check Your Version and Rebuild If Needed
Attackers drained Bitcoin and Litecoin hot wallets on BTCPay Server 2.4.1 and older on November 1, 2026. How to check your version, who needs a full rebuild and how to report a theft.
-
How to Check Third-Party Scripts on Your Website (DebugBear Hack)
A hijacked DebugBear monitoring script drained Polymarket users. Here is how to list every third-party script on your site, remove what you do not need and lock down the rest.
-
UpdraftCentral key compromise: how to check your WordPress site
If any of your WordPress sites run UpdraftPlus and you ever connected them to UpdraftCentral Cloud, check them today for signs of the UpdraftCentral key compromise….
-
AI agents hacked 100+ online stores: how to check yours
AI agents hacked online stores at 100+ companies using old flaws and forgotten subdomains. See what they exploited and use our 8-step security checklist.
-
Rank Math PRO 3.0.123 malware: how to check and clean your site
Rank Math PRO 3.0.123 shipped with a backdoor on October 15–16, 2026. Check your version, spot the indicators and clean your WordPress site in the right order.
