Nyambush

Security Blog

Understanding domain security threats and countermeasures

DNS

Email Authentication

Security Headers

WordPress

WordPress
WordPress Vulnerabilities - Attack Methods and Defenses
Known WordPress vulnerabilities, version exposure risks, and update strategies
WordPressCVSS 7.5
CVE-2017-1001000: REST API Defacement of 800K Sites
How an unauthenticated REST API bug led to 1.5 million page defacements in 48 hours
WordPressCVSS 7.5
CVE-2022-21661: SQL Injection in WP_Query
SQL injection in the WP_Query class affecting 8 years of versions (4.1 to 5.8.2)
WordPressCVSS 8.8
CVE-2019-8942/8943: Image Upload to RCE
Path traversal via image crop leading to remote code execution
WordPressCVSS 8.0
CVE-2022-21662: Stored XSS via Post Slugs
Stored XSS via post slugs that went undetected for 3+ years, affecting wordpress.org itself
WordPressCVSS 9.8
CVE-2026-1357: WPvivid Backup Unauthenticated RCE
900K sites affected. Arbitrary file upload via backup receive feature leading to RCE
WordPressCVSS 10.0
CVE-2026-23550: Modular DS Authentication Bypass (CVSS 10.0)
Maximum CVSS 10.0, actively exploited. Login API authentication bypass grants admin access
WordPressCVSS 9.8
CVE-2025-14533: ACF Extended Privilege Escalation (100K Sites)
Unrestricted role assignment via form registration. Public PoC increases exploitation risk
WordPressCVSS 9.8
CVE-2025-14998: Branda Password Reset Account Takeover
Password reset without identity validation. All users including administrators are targets
WordPressCVSS 8.8
CVE-2025-14364: Demo Importer Plus Site Reset & Privilege Escalation
Missing authorization lets Subscriber-level users reset the entire site and gain admin access
WordPressCVSS 9.8
CVE-2025-4322: Motors Theme Password Reset Privilege Escalation
Unauthenticated account takeover in automotive theme. 22K sites affected
WordPressCVSS 7.2
CVE-2026-1320: Content Locking Plugin Stored XSS
Stored XSS in admin panel via X-Forwarded-For header injection. Session hijacking risk
WordPressCVSS 9.8
CVE-2025-11833: Post SMTP Email Log Account Takeover
400K sites affected. Stealing password reset links from email logs to take over admin accounts
WordPressCVSS 9.8
CVE-2026-1490: CleanTalk Authentication Bypass via Reverse DNS Spoofing
200K sites affected. Spoofing DNS PTR records to bypass auth and install arbitrary plugins
WordPressCVSS 9.8
CVE-2025-8489: King Addons for Elementor Unauthenticated Privilege Escalation
Register as admin by simply specifying role=administrator. Metasploit module publicly available
WordPressCVSS 9.8
CVE-2025-6389: Sneeit Framework Unauthenticated RCE
Arbitrary PHP function execution via unsanitized input to call_user_func(). 131K exploit attempts blocked
WordPressCVSS 9.3
CVE-2025-12707: Library Management System SQL Injection
Unauthenticated SQL injection in library/educational plugin. Full database extraction risk

Infrastructure