When you buy through links on our articles, Future and its syndication partners may earn a commission. Thousands of WordPress sites have been hijacked to distribute info-stealing malware, according to security researchers at cybersecurity company c/side. By exploiting outdated versions of WordPress sites and plug-ins, hackers have taken over and then used these vulnerable sites to […]
Category Archives: Wordpress News
18
Jan
Jan
Recently discovered flaw allows threat actors to access sensitive information W3 Total Cache, a popular website performance optimization WordPress plugin, reportedly carried a high-severity vulnerability which allowed attackers to access sensitive information, abuse service plan limits, and run unauthorized actions. The vulnerability is tracked as CVE-2024-12365, and has a severity score of 8.5/10 (high). It occurs […]
16
Jan
Jan
WordPress “Popular Posts Plugin” Affects Over 100k Websites High-severity vulnerability discovered in a Popular Posts plugin makes it possible for attackers to inject arbitrary shortcodes An advisory has been issued about a high-severity WordPress vulnerability that makes it possible for attackers to inject arbitrary shortcodes into sites using the WordPress Popular Posts plugin. Attackers do […]