CVE-2026-1581Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 23 days ago
What the reports say
1 report, newest first · the exact sentence from each-
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory“The disclosure comes as a high-severity unauthenticated SQL injection flaw in the wpForo Forum WordPress plugin (CVE-2026-1581, CVSS score: 7.5) has come under active exploitation.”
Thanks — we review every report.