WordPress 7.1.1 fixes a chain that installs a theme from the official directory from a single crafted link.
CISA added iCagenda and Balbooa Forms Joomla extension flaws to its KEV catalog, citing active exploitation and remote code execution…