Wordfence WordPress Vulnerabilities Surge with New Threat Response Team Announcement
Article Content
Browse articles 
- •497 vulnerabilities reported in WordPress plugins and themes last week.
- •New Wordfence Threat Response Team established for urgent threat management.
- •Site owners can report active threats directly to the Threat Response Team.
During the week of October 12-18, 2026, Wordfence reported 497 vulnerabilities in 327 WordPress plugins and 23 themes. The Wordfence Threat Response Team was introduced to address active threats, allowing users to report issues directly. This team will focus on urgent threats within the first 72 hours of detection. The vulnerabilities reported include flaws that could be exploited if left unpatched. Site owners are encouraged to utilize the Wordfence Intelligence database for updates. The new team aims to enhance the security response for WordPress users, providing guidance and protection against emerging threats.
Ask AI about this cluster
Answers cite the sources they use
Updated just now How this analysis works
Timeline
2026-10-23
497 vulnerabilities disclosed
Wordfence reported 497 vulnerabilities across 327 plugins and 23 themes added to their database.
Wordfence2026-10-26
Wordfence Threat Response Team launched
Wordfence announced the creation of a Threat Response Team to manage active threats in the WordPress ecosystem.
WordfenceMore articles in this cluster (3)
Common questions
What types of vulnerabilities were reported?
The report includes vulnerabilities across 327 plugins and 23 themes, with varying severity levels.
How can I report an active threat?
You can report an active threat directly to the Threat Response Team via email at [email protected].
What should I do if my site is affected?
Review the vulnerabilities in the Wordfence Intelligence database and apply any necessary patches or updates.
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…