Funnel Builder flaw hits 40,000+ stores; fake GTM skimmers steal checkout payment data before patch 3.15.0.3.
Ravie LakshmananMay 16, 2026Vulnerability / Website Security
A critical security vulnerability impacting the
Funnel Builder
plugin for WordPress has come under active exploitation in the wild to
inject malicious JavaScript code
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript…
Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow hackers…
Threat actors are actively exploiting CVE-2026-3300, a critical RCE vulnerability (CVSS 9.8) in Everest Forms Pro WordPress…
WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a supply-chain attack impacting Awesome…
Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system…
CVE-2026-8732 in WP Maps Pro lets unauthenticated attackers create admin accounts on 15,000+ WordPress sites. Wordfence blocked…
