13 min
WordPress Plugin Vulnerabilities, Q3 2026: What Got Exploited, and What the Bots Tried on Our Own Sites
Three WordPress core flaws and one Elementor Pro bug were exploited at scale between July and September 2026, most within hours of the patch. Next to them: what Wordfence logged on the WordPress sites we run, and the login our AI publishing agent leaked through RSS.