20,000 WordPress Sites Compromised by Backdoor Vulnerability

20,000 WordPress Sites Compromised by Backdoor Vulnerability

First seen 23 Jan 2026, 22:10 UTC GbhackersCybersecuritynewsCyberpress 69% similarity 57.3

Article Content

Browse articles
ThreatCluster

A backdoor vulnerability in the LA-Studio Element Kit for Elementor has compromised over 20,000 WordPress sites, allowing attackers to create admin accounts without authentication. This vulnerability, tracked as CVE-2026-0920, poses a significant risk of complete website takeover.

ThreatCluster AI How this analysis works

Community

Browse all →

Tracked Entities in This Story