WordPress

Everything DarkWeb Headlines has reported about WordPress: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Update Stylemix uListing to Fix Critical SQLi Allowing Remote Code Execution in Versions Up to 2.2.0

The NVD rates CVE-2026-62031 as critical, noting that unauthenticated SQL injection flaws in Stylemix uListing versions up to 2.2.0 allow remote attackers to execute arbitrary code.

Oct 11, 2026

Vulnerabilities

Update Advanced IP Blocker to Stop Unauthenticated 2FA Bypass and Full Site Takeover

A critical flaw in the Advanced IP Blocker plugin allows unauthenticated attackers to bypass login controls and take over WordPress sites.

Oct 10, 2026