LIVE · cybersecurity feed
Live wire
CVE-2026-68820 · 17th August – Threat Intelligence ReportCVE-2026-69414 · ShieldBreak bypasses Microsoft’s patch for earlier Defender flawCVE-2026-15826 · WordPress Plugin Flaw Exposes 40,000 Sites to Admin TakeoverCVE-2026-58231 · Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After DisclosureBlack Hat and DEF CON are AI conferences now, tooAkira Ransomware Uses Safe Mode to Bypass EDRCVE-2026-58231 · Crooks Buy Expired Domains for Malware Delivery, Other Threats DetailedCVE-2026-58231 · SAP Commerce Cloud CVE-2026-58231 Exploited in the WildCVE-2026-65400 · macOS Screen Sharing Flaw Exploited to Deploy Monero MinersCVE-2026-46300 · Metasploit Wrap Up: Lot of summer shells and fit http profiles

plugin vulnerability

CVE-2026-15826critical

WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover

A critical vulnerability in the WordPress User Profile Builder plugin, affecting over 40,000 sites, allows unauthenticated attackers to gain administrator access. The flaw, CVE-2026-15826, stems from a type confusion error that can trick the plugin into granting administrative privileges if specific configurations are met, such as the administrator using user ID 1 and automatic login after registration being enabled. The plugin developer has released a patch, version 3.16.5, to address the issue.