84,000 WordPress Sites Affected by Three Plugins With The Same Vulnerability

[TheMarquis]

Summary: On November 5, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for a vulnerability we discovered in 3 WordPress plugins. This flaw made it possible for an attacker to update arbitrary site options on a vulnerable site, provided they could trick a site’s administrator into performing an action, such as clicking on a link.

Read more: https://www.wordfence.com/blog/2022...by-three-plugins-with-the-same-vulnerability/

 

[Leon jamesh]

Thank you for sharing this information!!

 

[randomstrings]

Summary: On November 5, 2021 the Wordfence Threat Intelligence team initiated the responsible disclosure process for a vulnerability we discovered in 3 WordPress plugins. This flaw made it possible for an attacker to update arbitrary site options on a vulnerable site, provided they could trick a site’s administrator into performing an action, such as clicking on a link.

Read more: https://www.wordfence.com/blog/2022...by-three-plugins-with-the-same-vulnerability/

Wordefence still not able to prevent people from bypassing premium activation and they keep on poking others

 

[UnusualSubstance]

Minimal plugins, minimal problems. Wordfence is bloated like crazy.