WordPress 7.1.3 fixes seven security flaws, including XSS and SQL injection bugs
The WordPress project released version 7.1.3 on October 6 with seven security fixes and four bug fixes, urging site owners to update immediately.
#WordPress
Cybersecurity news about “WordPress”.
Hackers exploit Ninja Forms and WooCommerce plugin XSS flaws to plant hidden WordPress admins
Patchstack says a single campaign is abusing stored XSS bugs in Ninja Forms and WPC Product Bundles to create admin accounts, a magic login link and a file manager backdoor.
Self-healing SC backdoor rebuilds itself on WordPress sites after cleanup
Sucuri researchers detailed SC, a WordPress backdoor that keeps copies in at least eight places across files, the database and shared memory, each able to rebuild the others.