Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

DARK SECRETS: Another worrying wordpress plugin security flaw could put 250 000 websites at risk - The Real Truth

WordPress logo on mobile.

  • Ally WordPress plugin carried SQL injection flaw (CVE-2026-2413)
  • Vulnerability left ~246,600 sites exposed to data theft
  • Fixed in version 4.1.0; WordPress urges immediate updates
Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.