CyberNews: 30/08/2026 Edition

Today’s roundup

Summary

Wordfence and Patchstack disclosed critical flaws in the WordPress plugins and themes WPMU DEV Dashboard, Avada, TranslatePress, Pods and GiveWP, including CVE-2026-76581 (CVSS 9.8), that can lead to authentication bypass, account takeover and arbitrary code execution.

Microsoft detailed TerminalFix, a ClickFix variant that uses fake Cloudflare CAPTCHAs to trick users into running a malicious command in Windows Terminal or PowerShell rather than the Run dialog, making complex commands more likely to succeed, and deploys a reverse-tunnel backdoor.

Want to dig deeper?

Vulnerabilities