Plugin news

A critical vulnerability in the WP Maps Pro WordPress plugin is being actively exploited by attackers. The flaw allows unauthorized users to create new administrator accounts, granting them full control over affected websites. The plugin has over 15,000 sales, indicating a significant number of potentially vulnerable sites.

A critical vulnerability in the popular WordPress plugin Kirki is being actively exploited. The flaw allows attackers to escalate privileges and take over any user account, including administrator accounts. This poses a severe risk to websites using the plugin, enabling complete site compromise and data theft.