Filtered by tag: security vulnerability × Clear
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
Matched: WordPress
WordPress patched a critical vulnerability in its core software that allows unauthenticated attackers to force a site to load a PHP file from outside its theme folders, potentially enabling remote code execution on some servers. The fix was released September 22 in WordPress 6.7.2 and backported to all supported branches dating to version 4.7. Site owners are urged to update immediately.
WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover
Matched: WordPress
A critical vulnerability in the WordPress User Profile Builder plugin, used by over 40,000 sites, allowed unauthenticated attackers to gain administrator-level access. The flaw enabled privilege escalation without requiring login credentials, potentially giving attackers full site control. A patch has been released and users are urged to update immediately.