A zero-day vulnerability exists in WordPress Core that in some instances could allow an attacker to reset a user’s password and gain access to their account. Researcher Dawid Golunski of Legal Hackers disclosed the vulnerability on Wednesday via
Researchers are urging WordPress users to patch their software after multiple hackers began exploiting a new vulnerability to deface over a million sites so far. The unauthenticated privilege escalation vulnerability – which was discovered in a
Webmasters still using the deprecated WP Marketplace WordPress plugin should update to a new e-commerce utility as soon as possible, and remove the plugin from their sites in order to avoid having their servers compromised. The reason for this
Many small- to medium-sized business owners rely on internal staff to maintain their WordPress website, even if it’s not their area of expertise. Often WordPress websites are used due to cost considerations as the entry point for website
We are reaching out to you today because there has been an increase in the number of websites infected with SEO Spam, and the attack vector is the WP Mobile Detector plugin. The plugin has a new Zero Day vulnerability allowing attacker to
A report published by security firm Imperva showed that, during the first half of 2015, the number of attacks on Web applications grew tremendously, with a special focus on SQL injection and XSS exploits. Imperva’s Web Application Attack
For almost a decade, a critical remote command execution vulnerability has existed in Joomla; versions 1.5 through 3.4.5 are affected by CVE-2015-8562. According to Ars Technica, while Joomla security teams patched the vulnerability within two
Hard to exploit, but a bountiful bug for hackers A stored XSS vulnerability, which allowed attackers to execute malicious code in the user’s browser, was discovered and patched in the WordPress WooCommerce plugin. The vulnerability was
There is a critical vulnerability in WordPress’ Gwolle Guestbook plugin, which has over 10 000 active installations globally. The vulnerability was uncovered by IT security company High-Tech Bridge’s research team last week.