Tag: Plugin Vulnerability
Patch rush for five WordPress add-ons after takeover-grade flaws
Five critical flaws across WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP open sites to takeover and code execution.
SAML plugin bugs hand WordPress admin access to strangers
Two unauthenticated bugs in the miniOrange SAML plugin let attackers log in as any WordPress user.
WordPress page builder flaw turns file forms into remote code execution
Patchstack warns that a CVSS 9.0 flaw in Elementor Pro lets unauthenticated attackers upload PHP files and take over sites.
WordPress form plugin flaw lets strangers plant backdoor PHP files
A critical arbitrary file upload bug in Forminator Forms, running on more than 600,000 WordPress sites, lets unauthenticated attackers execute…
Two Critical Flaws in Popular WordPress Plugin Threaten Over One Million Sites
The Avada Builder plugin flaws allow low level users to read server files and unauthenticated attackers to steal database credentials.