50,000 Site Ninja Forms File Upload Vulnerability | Anthropic Project Glasswing | Fortinet Zero Day | Wordfence Security News | April 6 2026

This week in Wordfence Security News (Week of Apr 6, 2026):An arbitrary file upload vulnerability in Ninja Forms File Upload puts 50,000+ WordPress sites at riskA Fortinet zero-day actively exploited in the wildA CERT-EU report reveals a European Commission cloud breach tied to a Trivy supply chain attack — with Cisco source code stolen in the falloutAnthropic announces Project GlasswingGermany doxes "UNKN," the head of the REvil and GandCrab ransomware gangsStory Links:Ninja Forms File Upload Vulnerability: https://www.wordfence.com/blog/2026/04/50000-wordpress-sites-affected-by-arbitrary-file-upload-vulnerability-in-ninja-forms-file-upload-wordpress-plugin/Fortinet Advisory: https://fortiguard.fortinet.com/psirt/FG-IR-26-099CERT-EU Report: https://cert.europa.eu/blog/european-commission-cloud-breach-trivy-supply-chainCisco / Trivy Fallout: https://www.bleepingcomputer.com/news/security/cisco-source-code-stolen-in-trivy-linked-dev-environment-breach/Anthropic Glasswing Announcement: https://www.anthropic.com/Krebs on Security (REvil): https://krebsonsecurity.com/2026/04/germany-doxes-unkn-head-of-ru-ransomware-gangs-revil-gandcrab/Stay informed and secure: get the latest WordPress security news on the Wordfence blog or subscribe to the WordPress Security Newsletter.