security Source: BleepingComputer

📅 07 October 2026 at 04:30 AM UTC

Ninja Forms plugin flaw exploited to hack WordPress sites

Verified Primary Feed Ingestion

↗ Open Source Publication

⚡ Executive Takeaways & Intelligence Summary

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue admin accounts. [...]

Publication Reference: https://www.bleepingcomputer.com/news/security/ninja-forms-plugin-flaw-exploited-to-hack-wordpress-sites/

← Back to News Wire

📰 Related Surveillance Disclosures

BleepingComputer

Hackers pull off $133 million French bank heist via service provider

BleepingComputer

CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

The Hacker News

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub