Aug 12025 Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install Critical WordPress flaw CVE-2025–5394 lets attackers take over sites using the “Alone” theme. 120K+ attempts blocked.