WordPress 7.1.3 fixes seven security flaws, including XSS and SQL injection bugs
The WordPress project released version 7.1.3 on October 6 with seven security fixes and four bug fixes, urging site owners to update immediately.
#Patchstack
Cybersecurity news about “Patchstack”.
Hackers exploit Ninja Forms and WooCommerce plugin XSS flaws to plant hidden WordPress admins
Patchstack says a single campaign is abusing stored XSS bugs in Ninja Forms and WPC Product Bundles to create admin accounts, a magic login link and a file manager backdoor.