4 verified briefings on Wordpress. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
A critical vulnerability in the Everest Forms Pro WordPress plugin is being actively exploited by hackers. The flaw allows attackers to execute code remotely and completely take over websites running versions up to 1.9.12.
A critical vulnerability in the WP Maps Pro WordPress plugin is being actively exploited by attackers. The flaw allows unauthorized users to create new administrator accounts, granting them full control over affected websites. The plugin has over 15,000 sales, indicating a significant number of potentially vulnerable sites.
A supply-chain attack compromised JavaScript files used by popular WordPress plugins like OptinMonster. The malicious code created hidden admin accounts on affected sites, giving attackers full control when an administrator was logged in.
A critical vulnerability in the popular WordPress plugin Kirki is being actively exploited. The flaw allows attackers to escalate privileges and take over any user account, including administrator accounts. This poses a severe risk to websites using the plugin, enabling complete site compromise and data theft.