Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites

Two critical-severity authentication bypass vulnerabilities in WordPress plugins with tens of thousands of installations.
The post Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites appeared first on SecurityWeek.
Continue reading Critical WordPress Plugin Vulnerabilities Impact Thousands of Sites

Decade-old critical vulnerability in Jetpack patched on millions of WordPress websites

Jetpack. an extremely popular WordPress plugin that provides a variety of functions including security features for around five million websites, has received a critical security update following the discovery of a bug that has lurked unnoticed since 2… Continue reading Decade-old critical vulnerability in Jetpack patched on millions of WordPress websites

WordPress Field Builder Plugin Vulnerability Exploited in Attacks Two Days After Patch

PoC exploit targeting an XSS vulnerability in the Advanced Custom Fields WordPress plugin started being used in malicious attacks two days after patch.
The post WordPress Field Builder Plugin Vulnerability Exploited in Attacks Two Days After Patch appe… Continue reading WordPress Field Builder Plugin Vulnerability Exploited in Attacks Two Days After Patch