WordPress Plugin and Router Botnet Threats Demand Immediate Patching

The Daily CVE Update · Aug 18, 2026 · 14m

WordPress Plugin and Router Botnet Threats Demand Immediate Patching

This episode examines two active cybersecurity threats affecting UK small businesses: CVE-2026-15748, a critical unauthenticated remote code execution vulnerability in the Forminator Forms WordPress plugin with over 600,000 installations, and Evooo1Bot, a Linux botnet targeting unpatched routers and edge devices using decade-old vulnerabilities. Corrine explains how both threats exploit the absence of basic patching practices, why automated scanning makes business size irrelevant as a defence, and provides practical steps…