Vulnerability Reports
Dated disclosures of plugin, theme, and core vulnerabilities, and how MalCare responds.
27 articles · page 1 of 3
New cPanel Vulnerability Proves Malware Scanners Are No Longer Optional
Learn what CVE-2026-41940 means for cPanel-hosted WordPress sites and why continuous malware scanning is essential after a hosting-level breach.
Critical Bug in Ally Plugin Targets 400,000 Websites—Was Yours Affected?
A serious security flaw was found in the Ally WordPress plugin, a tool running on more than 400,000 websites. This wasn't a minor bug.
MalCare Blocks 11000+ Attacks on Royal Elementor Plugin v1.3.78 RCE Vulnerability Before Patch Release
MalCare blocked more than 11000 attempts to exploit the recently discovered Royal Elementor plugin vulnerability. Our firewall protected sites for over a week
MalCare Protects Against Massive LiteSpeed Cache Privilege Escalation Vulnerability
A critical LiteSpeed Cache privilege-escalation flaw affected millions of sites. Learn what happened and how MalCare protected customers.
MalCare Defends Against Login/Signup Popup Privilege Escalation Vulnerability
A Login/Signup Popup flaw could let subscribers gain administrator access. Learn which versions were affected and how to protect your site.
Gravity Forms Bug Left 46,000+ Sites Exposed. Was Yours One of Them?
Understand the Gravity Forms arbitrary file-upload flaw, determine exposure, update safely, and check the site for compromise.
The Hidden Life of WordPress Vulnerabilities
Follow a WordPress vulnerability from discovery and disclosure through patching, exploitation, and practical site protection.
MalCare Blocks 1.2 Billion+ XSS Attacks Exploiting the tagDiv Plugin Vulnerability
MalCare recently blocked over 1.2 billion cross-site scripting (XSS) attacks on its customer websites. In the biggest attack campaign of the year, MalCare saw
A Tale of Two Vulnerabilities
When you see news of a 9.9 (or in some cases 8.8) vulnerability in Elementor, that is a cue to panic.
MalCare blocks attacks on vulnerable Bricks Theme Builder v1.9.6
MalCare blocked more than 26,000 attacks exploiting an RCE flaw in Bricks Builder 1.9.6. Learn the risk and required response.
MalCare Proactively blocks 100,000+ attacks Targeting Popup Builder XSS vulnerability
Learn how attackers exploited the Popup Builder XSS vulnerability, which sites were at risk, and how MalCare protected customers.
MalCare Proactively Blocks 10,000+ Attacks Targeting LiteSpeed Cache XSS Vulnerability
MalCare blocked more than 10,000 attacks exploiting a LiteSpeed Cache XSS flaw. Learn the risk, symptoms, and safest response.