CVE-2026-8732 in WP Maps Pro lets unauthenticated attackers create admin accounts on 15,000+ WordPress sites. Wordfence blocked 2,858 attacks in 24 hours.
Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data.
It is documented at windowjs.org. Window.js is distributed as a single binary that can be downloaded for Windows and macOS. It can also be built from the sources for Windows, macOS and Linux.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results