The impact of an XSS vulnerability on WordPress: How hackers exploit XSS vulnerabilities to create admin accounts on your blog.

With a proof of concept and a video, we explain in this post how hackers exploit XSS vulnerabilities in order to create administrator accounts on your blog.

Critical zero-day vulnerability fixed in WordPress File Manager (700,000+ installations).

Critical zero-day vulnerability fixed in WordPress File Manager (700,000+ installations). Update immediately.

WordPress Kali Forms plugin fixed multiple vulnerabilities.

The WordPress Kali Forms plugin (30,000+ active installations) fixed multiple vulnerabilities affecting version 2.1.2 and below.

Multiple vulnerabilities fixed in CMP – Coming Soon and Maintenance plugin.

The WordPress CMP – Coming Soon and Maintenance plugin (100k+ active installations) fixed multiple vulnerabilities.

High severity vulnerability fixed in Product Input Fields for WooCommerce.

The Product Input Fields for WooCommerce plugin (5,000+ active installations) fixed a high severity vulnerability that could allow an unauthenticated user to download any file from the blog, including the WordPress configuration file.