Critical WordPress Bug can do a Clean wipe of database
A major security vulnerability in the WP Reset PRO WordPress plugin could be exploited by an authenticated user to wipe the entire database of a website. The issue can be…
Posted inSecurity
Million WordPress Sites Under Risk
Cybersecurity researchers have helped patch several vulnerabilities in an extremely popular WordPress Plugins, which could have been exploited by any visitor to undertake a number of actions against affected Wordpress websites. OptinMonster helps…
Brizy Vulnerability Affects 90k Sites
Researchers have unearthed Potentially exploitable bugs were found in the Brizy Page Builder, a WordPress plugin that is installed across more than 90,000 websites. The company’s Threat Intelligence team reported…
Capoae Malware Campaign
Researchers discovered the threat after a sample of the malware targeted one Akamai honeypot. The attackers dropped a PHP malware sample through a backdoor linked to a WordPress plugin called…
Redux Bug affects WordPress
The Gutenberg Template Library & Redux Framework plugin for WordPress, which is deployed on over 1 million websites, is a collection of blocks that allow publishers to quickly create websites…
WordPress Plugin 0 Day
Fancy Product Designer, a WordPress plugin installed on over 17,000 sites, has been discovered to contain a critical file upload vulnerability that's being actively exploited in the wild to upload…
Posted inSql
WordPress Blind SQL
A Time-Based Blind SQL Injection vulnerability with a CVSS Score of 7.5 severiity in WP Statistics, which is a WordPress plugin with over 600,000 active installs provides website statistics. An…
Posted inCMS
WordPress RCE Bug Bounty
Zerodium has tripled the payouts for exploits for the WordPress CMS that could be used to achieve remote code execution. Zerodium announced via Twitter that is temporarily offering a $300,000…