Ally WordPress plugin carried SQL injection flaw (CVE-2026-2413) Vulnerability left ~246,600 sites exposed to data theft Fixed in version 4.1.0; WordPress urges immediate updates A popular WordPress ...
As noted by WordPress, the private sites created using its in-browser workspace “aren’t optimized for traffic, discovery, or ...