NewsBite analysis · Security, WebDev
TechCrunch
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk
Last week, WordPress addressed two critical security flaws that prompted immediate updates for users. Despite these updates, hackers are exploiting these vulnerabilities in real-time, compromising websites still running outdated versions. Cybersecurity specialists report that the flaws pose risks to potentially 90 million sites, given that many installations remain unpatched. The situation underscores the necessity of prompt action for WordPress users to secure their sites.
Act nowConfidence: HighImmediate horizonCybersecurity risk: High
Published 20 Jul 2026, 16:41 UTC1 min read
Visit original article ↗Lead image — TechCrunch
Summary
TL;DR
- WordPress patched two critical vulnerabilities last week.
- Cybersecurity firms warn that hackers are actively exploiting these vulnerabilities.
- Over 400 million websites are running potentially flawed versions.
- An estimated 90 million websites could be at risk.
- Automatic updates have been implemented to combat the issue.
Interesting facts
- Less than 15% of surveyed WordPress sites were found to be vulnerable.
- The vulnerabilities allow complete remote control of compromised sites.
Coverage gaps