Topic: plugin update

January 18, 2026

Critical Vulnerability in All In One SEO Plugin Impacts 3M+ WordPress Sites

A critical vulnerability in the All in One SEO plugin exposed its global AI access token to any logged-in user with Contributor-level permissions, risking unauthorized AI usage and service credit depletion. The flaw, stemming from a missing permission check on an API endpoint, is part of a trend,...

January 17, 2026

WordPress Plugin Flaw Gives Hackers Admin Access

A severe vulnerability (CVE-2026-23550) in the Modular DS WordPress plugin is being actively exploited, allowing attackers to gain full administrative control over websites with over 40,000 active installations. The flaw, present in versions 2.5.1 and older, stems from inadequate request verifica...

November 21, 2025

Critical Vulnerability Found in W3 Total Cache WordPress Plugin

A critical security flaw (CVE-2025-9501) in the W3 Total Cache WordPress plugin allows unauthenticated attackers to execute arbitrary PHP commands via specially crafted comments, affecting all versions before 2.8.13. The vulnerability, located in the `_parse_dynamic_mfunc()` function, was fixed i...

November 5, 2025

Fix Your Stream Deck's 'Device Not Supported' Error With a Simple Login

The "Device Not Supported" error on Elgato Stream Deck is caused by an expired Elgato digital certificate, which conflicts with BarRaider plug-in verification checks. To resolve the issue, users must log into the Elgato marketplace via the Stream Deck software and then completely close and restar...