{"id":11,"date":"2026-07-25T12:27:07","date_gmt":"2026-07-25T12:27:07","guid":{"rendered":"https:\/\/glitch.lat\/?p=11"},"modified":"2026-07-25T12:29:30","modified_gmt":"2026-07-25T12:29:30","slug":"urgent-half-a-billion-wordpress-sites-under-attack-heres-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/glitch.lat\/index.php\/2026\/07\/25\/urgent-half-a-billion-wordpress-sites-under-attack-heres-what-you-need-to-know\/","title":{"rendered":"URGENT: Half a Billion WordPress Sites Under Attack – Here’s What You Need to Know !"},"content":{"rendered":"\n

Imagine your house has a front door lock that’s completely broken. Not just a little broken\u2014so broken that anyone can walk in without a key, without breaking anything, and without you even knowing they’re there.<\/p>\n\n\n\n

That’s what just happened to 500 MILLION websites.<\/strong><\/p>\n\n\n\n

Two critical bugs were discovered in WordPress (the software that powers about 40% of all websites on the internet). These bugs are being actively exploited on a dark web forum called Omerta.top by hackers who are literally selling access to hacked sites.<\/p>\n\n\n\n

\n\n\n\n

What Are These Bugs? (The Technical Breakdown)<\/strong><\/h2>\n\n\n\n

Bug #1 (CVE-2026-63030):<\/strong> The server gets confused about which request is which<\/p>\n\n\n\n

    \n
  • Think of it like a mail carrier who can’t tell which envelope goes to which house<\/li>\n\n\n\n
  • Hackers trick the server into running their malicious code instead of legitimate requests<\/li>\n<\/ul>\n\n\n\n

    Bug #2 (CVE-2026-60137):<\/strong> A SQL injection vulnerability<\/p>\n\n\n\n

      \n
    • SQL is the language databases use to store information<\/li>\n\n\n\n
    • Hackers can inject malicious commands into the database without needing a password<\/li>\n\n\n\n
    • It’s like having a secret back door to a filing cabinet<\/li>\n<\/ul>\n\n\n\n

      When Combined:<\/strong> These two bugs create what’s called “Remote Code Execution” (RCE)<\/p>\n\n\n\n

        \n
      • This means hackers can take complete control of a website’s server<\/li>\n\n\n\n
      • They can steal customer data, emails, credit card information<\/li>\n\n\n\n
      • They can install crypto miners to use your computer’s power<\/li>\n\n\n\n
      • They can install backdoors for future attacks<\/li>\n<\/ul>\n\n\n\n
        \n\n\n\n

        Why Is This Happening RIGHT NOW?<\/strong><\/h2>\n\n\n\n

        According to the omerta.top forum thread, a hacker group is\u00a0actively selling exploit tools and services<\/strong>\u00a0for $1,000 per setup. Here’s what’s concerning:<\/p>\n\n\n\n

          \n
        1. The vulnerability was just made public<\/strong>\u00a0\u2014 WordPress released patches, but…<\/li>\n\n\n\n
        2. Not everyone updates immediately<\/strong>\u00a0\u2014 Many website owners ignore security warnings<\/li>\n\n\n\n
        3. Hackers are moving FAST<\/strong>\u00a0\u2014 They’re scanning for vulnerable sites and exploiting them before patches are installed<\/li>\n\n\n\n
        4. It’s being commercialized<\/strong>\u00a0\u2014 People are literally selling “ready-to-use” hacking tools on dark web forums<\/li>\n<\/ol>\n\n\n\n

          The forum post even brags: “No password needed. No CAPTCHA. No bullshit.”<\/em><\/p>\n\n\n\n

          \n\n\n\n

          What Websites Are Vulnerable?<\/strong><\/h2>\n\n\n\n
            \n
          • WordPress versions 6.9.0 through 6.9.4<\/li>\n\n\n\n
          • WordPress versions 7.0.0 through 7.0.1<\/li>\n\n\n\n
          • That’s approximately 500+ million websites<\/strong><\/li>\n<\/ul>\n\n\n\n

            Your school’s website? Your favorite gaming forum? That local pizza shop’s online ordering system? Any of them could be running vulnerable WordPress.<\/p>\n\n\n\n

            \n\n\n\n

            What Should YOU Do?<\/strong><\/h2>\n\n\n\n

            If You’re a Website Owner\/Administrator:<\/strong><\/h3>\n\n\n\n
              \n
            1. Update WordPress IMMEDIATELY<\/strong>\u00a0\u2014 Don’t wait, don’t procrastinate<\/li>\n\n\n\n
            2. Change all admin passwords<\/strong>\u00a0\u2014 Assume hackers might already have access<\/li>\n\n\n\n
            3. Block the vulnerable endpoint<\/strong>\u00a0\u2014 Temporarily block\u00a0\/wp-json\/batch\/v1<\/code>\u00a0at your firewall<\/li>\n\n\n\n
            4. Scan for backdoors<\/strong>\u00a0\u2014 Check if hackers already installed hidden access points<\/li>\n\n\n\n
            5. Monitor your database<\/strong>\u00a0\u2014 Look for suspicious user accounts or data theft<\/li>\n<\/ol>\n\n\n\n

              If You’re Just a Regular Internet User:<\/strong><\/h3>\n\n\n\n
                \n
              1. Use strong, unique passwords<\/strong>\u00a0for every website<\/li>\n\n\n\n
              2. Enable two-factor authentication<\/strong>\u00a0wherever possible<\/li>\n\n\n\n
              3. Monitor your accounts<\/strong>\u00a0for suspicious activity<\/li>\n\n\n\n
              4. Be suspicious of emails<\/strong>\u00a0from affected websites asking you to reset passwords<\/li>\n\n\n\n
              5. Check your credit reports<\/strong>\u00a0if you’ve shopped on vulnerable sites<\/li>\n<\/ol>\n\n\n\n
                \n\n\n\n

                The Dark Web Connection<\/strong><\/h2>\n\n\n\n

                The forum thread we analyzed shows hackers:<\/p>\n\n\n\n

                  \n
                • Openly advertising exploits<\/strong>\u00a0for sale<\/li>\n\n\n\n
                • Offering “done-for-you” hacking services<\/strong>\u00a0($1,000 per setup)<\/li>\n\n\n\n
                • Providing source code<\/strong>\u00a0for automated attacks using AI<\/li>\n\n\n\n
                • Confirming successful exploits<\/strong>\u00a0in real-time<\/li>\n<\/ul>\n\n\n\n

                  This isn’t theoretical. This is happening RIGHT NOW.<\/p>\n\n\n\n

                  \n\n\n\n

                  Why This Matters<\/strong><\/h2>\n\n\n\n

                  This is a perfect example of why cybersecurity matters:<\/p>\n\n\n\n

                  \ud83d\udd34 The Scale:<\/strong> 500 million websites affected
                  \ud83d\udd34 The Speed:<\/strong> Hackers move faster than website owners patch
                  \ud83d\udd34 The Commercialization:<\/strong> Hacking is now a business with customer service
                  \ud83d\udd34 The Automation:<\/strong> AI is being used to scale attacks<\/p>\n\n\n\n

                  \n\n\n\n

                  The Bottom Line<\/strong><\/h2>\n\n\n\n

                  WordPress users need to update immediately. Website owners need to treat this as a crisis, not a suggestion. And regular internet users need to stay vigilant.<\/p>\n\n\n\n

                  This is cybersecurity in 2026: vulnerabilities don’t stay secret for long, and when they go public, hackers weaponize them within hours.<\/p>\n\n\n\n

                  Stay safe. Stay updated. Stay skeptical.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

                  Imagine your house has a front door lock that’s completely broken. Not just a little broken\u2014so broken that anyone can walk in without a key, without breaking anything, and without…<\/p>\n","protected":false},"author":1,"featured_media":15,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-11","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/posts\/11","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/comments?post=11"}],"version-history":[{"count":1,"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/posts\/11\/revisions"}],"predecessor-version":[{"id":14,"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/posts\/11\/revisions\/14"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/media\/15"}],"wp:attachment":[{"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/media?parent=11"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/categories?post=11"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/glitch.lat\/index.php\/wp-json\/wp\/v2\/tags?post=11"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}