THREATOPS

THREAT OPS › Threat News › Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

medthehackernewsPublished 2026-08-29

Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.

The vulnerabilities, according to Wordfence and Patchstack, are listed below -

CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in

MITRE ATT&CK techniques

VulnerabilitiesT1588.006

Indicators of compromise

CVE-2026-76581cve

Original source: https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html