Filtered by category: Infosecurity Magazine, tag: plugin security × Clear
WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover
Matched: WordPress
A critical vulnerability in the WordPress User Profile Builder plugin, used by over 40,000 sites, allowed unauthenticated attackers to gain administrator-level access. The flaw enabled privilege escalation without requiring login credentials, potentially giving attackers full site control. A patch has been released and users are urged to update immediately.