plugin-vulnerability

2 articles · newest first

The WordPress admin interface — Forminator Forms is a plugin used on over 600,000 WordPress sites

600,000 WordPress sites run this form plugin. one bug turns a dropdown into a hacker's backdoor

A file-upload field and a dropdown, sitting on the same form, are all it takes for an unauthenticated attacker to plant PHP code on your site. The fix has existed since July 31 — most sites just haven't installed it.

Kernel · Aug 20 · 6 min

Lines of code on a dark screen representing a security vulnerability

Software

there's a second WordPress bug this month — and this one has no patch, just a plugin you need to switch off tonight

While everyone patched the wp2shell core flaw, a 9.8-rated hole in a popular login plugin quietly went public with no fix available. If you run miniOrange's OAuth SSO, updating WordPress didn't save you.

Kernel · Jul 22 · 7 min