HIGHVulnerabilityExploited Critical WordPress Plugin Vulnerability Affects 5 Million Sites
Unauthenticated SQL injection in a top WordPress security plugin allows database takeover. 5 million active installations at risk.
CVE-2026-8001WordPress
WPScan / Wordfence