Ninja Forms plugin flaw exploited to hack WordPress sites
2026-10-07T07:23:22Z•b1505a468f70a1b65a6375d5365db65558388c53973e174ff98801cab6838425
CVE-2026-21589CVE-2026-61500AtlassianBitbucketConfluenceJiraMFA theftRejetto HFSWordPressaccount takeoveractive exploitationarbitrary file accessbackdoorbrowser-in-browsercredential compromisecritical infrastructuredata breachphishingprivacy breachransomwareremote code executionrogue admin accountssession forgerystored XSSvulnerabilityweb shellszero-day
What happened
A BleepingComputer security-news feed reports active exploitation and disclosure of multiple high-impact cybersecurity issues, including WordPress plugin stored-XSS attacks used to install backdoors and rogue administrator accounts; critical arbitrary file-access and remote-code-execution vulnerabilities in Atlassian and Rejetto HFS products; phishing campaigns stealing credentials and MFA codes; confirmed breaches affecting ASOS, Nikkei, and Denmark’s population registry; and other incidents involving financial institutions and privileged infrastructure. The most urgent items are actively mis
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- b1505a468f70a1b65a6375d5365db65558388c53973e174ff98801cab6838425
- Enrichment time
- 2026-10-07T07:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.