Share story
Security

Five critical WordPress flaws expose sites to takeover or code execution

Five critical WordPress flaws expose sites to takeover or code execution Image: Primary
Multiple critical flaws disclosed in WordPress plugins and themes could allow unauthenticated attackers to take over administrator accounts or execute code on affected servers. The affected products include WPMU DEV Dashboard, Avada, TranslatePress, Pods and GiveWP. The source lists CVSS scores of 9.8 for four issues and 10.0 for the GiveWP vulnerability, with attack conditions varying by product configuration. The disclosures identify affected versions but do not state whether fixes are available or whether the flaws are being exploited.
Sources
The Hacker News
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital Security
Capital Security

Pluto Security announces $42 million in funding for AI workspace controls

Pluto Security has emerged from stealth and announced $42 million in total funding, including an approximately $34 million latest round led by Jump Capital. The company plans to spend the new capital on product development, resear...

The Next Web
Security
Security

Ghostscript exploit tests expose server risk from crafted PDF uploads

Wordfence researchers developed two exploits for a Ghostscript flaw that could let attackers execute code on servers processing crafted PDFs, BleepingComputer reported. The vulnerability, CVE-2026-39919, affects versions 9.21 thro...

BleepingComputer