5M WordPress Sites Running ‘Contact Form 7’ Plugin Open to Attack
A critical unrestricted file upload bug in Contact Form 7 allows an unauthenticated visitor to take over a site running ...
A critical unrestricted file upload bug in Contact Form 7 allows an unauthenticated visitor to take over a site running ...
A poorly configured file opens users up to site takeover. Source link
WordPress websites using buggy Epsilon Framework themes are being hunted by hackers. Source link
Team Showcase, a sister plugin, is also vulnerable to the XSS and PHP object-injection bugs -- together they have 66,000 ...