Collaborate Disseminate
A vulnerability in the OttoKit WordPress plugin with over 100,000 active installations has been exploited in the wild.
The post Vulnerability in OttoKit WordPress Plugin Exploited in the Wild appeared first on SecurityWeek.
Continue reading Vulnerability in OttoKit WordPress Plugin Exploited in the Wild
Sucuri has discovered multiple malware families deployed in the WordPress mu-plugins directory to evade routine security checks.
The post Threat Actors Deploy WordPress Malware in ‘mu-plugins’ Directory appeared first on SecurityWeek.
Continue reading Threat Actors Deploy WordPress Malware in ‘mu-plugins’ Directory
The high-severity flaw in the Email Subscribers & Newsletters plugin by Icegram affects more than 100,000 WordPress websites. Continue reading WordPress Plugin Flaw Allows Attackers to Forge Emails
Websites are being hijacked by hackers exploiting plugin vulnerability Hackers password-protect compromised sites to keep out rival attackers At-risk websites advised to update WordPress File Manager plugin immediately. Hackers are exploiting a critica… Continue reading WordPress Websites Attacked via File Manager Plugin Vulnerability
WordPress plugin Comments – wpDiscuz, which is installed on over 70,000 sites, has issued a patch. Continue reading Critical Security Flaw in WordPress Plugin Allows RCE
Thousands of vulnerable websites need to apply the patch to avoid RCE. Continue reading Advertising Plugin for WordPress Threatens Full Site Takeovers
An attack over the weekend unsuccessfully targeted 1.3 million WordPress websites, in attempts to download their configuration files and harvest database credentials. Continue reading Attackers Target 1M+ WordPress Sites To Harvest Database Credentials
The flaws in LearnPress, LearnDash and LifterLMS could have allowed unauthenticated students to change their grades, cheat on tests and gain teacher privileges. Continue reading Critical WordPress e-Learning Plugin Bugs Open Door to Cheating
A second vulnerability could be used to prevent access to almost all of a site’s existing content, by simply redirecting visitors. Continue reading Critical WordPress Plugin Bug Can Lock Admins Out of Websites
The high-severity flaw allows malicious code injection into website pop-up windows. Continue reading WordPress Plugin Bug in Popup Builder Threatens 100K Websites