The breach isn’t the problem. The spread is. →The breach isn’t the problem. The spread is. →Measure in 5 min. Free AssessmentFree Assessment
Religious Institutions
Breach intelligence, attack campaigns, and threat reports targeting the Religious Institutions sector.
Explore Other Sectors
Religious Institutions Threat Reports
Critical GiveWP Plugin Vulnerability Exposes 100K+ WordPress Sites to Remote Code Execution
A critical vulnerability (CVE-2026-82222) in the GiveWP WordPress donation plugin allowed unauthenticated attackers to execute arbitrary commands on hosting servers through a complex chain of PHP deserialization flaws. The vulnerability affected over 100,000 installations running versions 4.16.6 through 4.16.7.1, exploiting unsafe PHP data handling, donation processing flows, and bundled library gadget chains. Attackers could bypass disabled user registration, create accounts, inject malicious serialized objects through crafted donations, and achieve remote code execution when the server processed front-end requests. GiveWP released version 4.16.7.2 on August 27, 2026, addressing the deserialization issues and removing stored malicious payloads from affected databases. This incident highlights the growing sophistication of WordPress plugin vulnerabilities, particularly those targeting donation and e-commerce platforms that handle sensitive financial data. With WordPress powering over 40% of websites and plugin vulnerabilities increasing 35% year-over-year, organizations must prioritize rapid security updates and implement defense-in-depth strategies.
3 weeks ago
Kill Chain
Vatican's 'Click to Pray' App Data Breach: A Wake-Up Call for API Security
In July 2026, the Vatican's official prayer application, 'Click to Pray,' experienced a significant data breach exposing the personal information of over 700,000 global users. The breach was due to an insecure direct object reference (IDOR) vulnerability in the app's API, allowing unauthorized access to user data, including names, email addresses, and country of origin. This incident underscores the critical need for robust access controls and regular security assessments in applications handling sensitive personal information. The prevalence of IDOR vulnerabilities highlights the importance of implementing comprehensive authorization checks to prevent unauthorized data access.
2 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports