Hackers have infected more than 3,300 websites with malware in recent weeks, despite the fact that the vulnerability was discovered late last year. The vulnerability is present in outdated versions of the Popup Builder plugin. The cross-site scripting vulnerability CVE-2023-6000 in Popup Builder versions 4.2.3 and older for WordPress was discovered in…
Two critical vulnerabilities in WordPress plugins from miniOrange will never receive a patch. More than 10,000 websites use the Malware Scanner plugin to detect attackers. However, the tool itself is exploitable by malicious actors. The vulnerability in Malware Scanner was found by WordPress researcher Stiofan O’Connor for a “Bug Bounty…
Automattic, the owner of WordPress and Tumblr, has acquired the all-in-one messaging app Texts.com for $50 million (€47 million). The purpose of the acquisition is to accelerate the messaging app’s development. The acquisition gives Automattic an all-in-one messaging app that merges several other messaging apps. Texts.com merges messages from different messaging…
A popular WordPress plug-in intended to send emails faster has been found to leave 150,000 websites vulnerable to a takeover. The developer of the POST SMTP plugin has acted swiftly, meaning a patch is already available. Wordfence reports that the vulnerability was submitted during a bug bounty program in December. After the…
The WordPress plugin Better Search Replace has a critical vulnerability that hackers are actively exploiting. That’s what the security experts at Wordfence Intelligence found. The popular WordPress plugin Better Search Replace has over 1 million installs worldwide. The plugin allows WordPress to search databases on a deeper level and replace…