Everything Packet Tribune has reported about WordPress: 3 stories, newest first. Part of our Vulnerabilities coverage.
An arbitrary file upload flaw in the Printcart Store plugin allows attackers to execute remote code on affected WooCommerce sites without authentication.
The National Vulnerability Database lists a critical object injection flaw in Rosalinda versions up to 1.2.4, exposing sites to potential compromise.
A CVSS 9.8 vulnerability in the miniOrange OTP verification plugin allows attackers to escalate privileges on affected WordPress sites.