
Software
there's a second WordPress bug this month — and this one has no patch, just a plugin you need to switch off tonight
While everyone patched the wp2shell core flaw, a 9.8-rated hole in a popular login plugin quietly went public with no fix available. If you run miniOrange's OAuth SSO, updating WordPress didn't save you.
Priya Nair · 2h ago · 7 min