National CERT has issued a critical advisory warning that severe WordPress vulnerabilities are being actively exploited, putting government, financial, enterprise, and public websites in Pakistan at risk.
Samaa TV’s Urdu news website was defaced by a group identifying itself as Hind Cyber Ghost, which claimed responsibility for the cyberattack. The broadcaster had not issued an official statement at the time of publication.
Threat actors are actively exploiting a recently patched vulnerability in the Gravity SMTP WordPress plugin, exposing API keys, OAuth tokens, and sensitive system information from over 100,000 potentially affected websites.
A critical vulnerability in WP Maps Pro plugin is being actively exploited by threat actors to create unauthorized administrator accounts on WordPress websites, prompting urgent security updates.
Jordan National Cyber Security Center confirms cyberattack targeting Jordan Media Institute website was successfully contained with no disruption to data or services.
A critical CVE-2026-1357 vulnerability in WPvivid Backup and Migration plugin exposes over 900,000 WordPress sites to remote code execution. Users urged to update to version 0.9.124 immediately.
