A vulnerability in the AIOSEO plugin affecting up to 3 million installations adds to the six vulnerabilities found in 2025.
WordPress membership plugin vulnerability exposing sensitive Stripe payment data affects up to 10,000 websites.