LiteSpeed Cache Vulnerability CVE-2026-18978 Patched in 7.9
Sucuri's August roundup flags an unauthenticated stored XSS in LiteSpeed Cache, patched in 7.9 after affecting 7.8.1 and earlier. ElementsKit and MC4WP shipped fixes too.
vulnerabilities
2 posts
WordPress plugin vulnerabilities July 2026: 93 flaws, four patches
WPSentry counted 93 WordPress vulnerabilities disclosed between 17 and 24 July 2026. Sucuri's roundup covers GTM4WP, Popup Maker, WPForms and SeedProd, and researchers flagged a backdoor campaign hiding in mu-plugins.