10,000+ WordPress Sites at Risk: Critical Plugin Flaws Exposed!
Over 10,000 WordPress sites are at risk of being hijacked thanks to three security flaws in the HT Contact Form Widget plugin. These vulnerabilities allow attackers to upload, delete, or move files willy-nilly, like a burglar with a master key. Site owners, it’s time to patch up or face a digital home invasion!
Hot Take:
WordPress sites are playing a dangerous game of musical chairs, where the music might just stop with a hacker sitting in the admin seat. With plugins like HT Contact Form Widget leaving the backdoor wide open, it’s like letting a fox guard the henhouse—and these foxes aren’t here to play nice!
Key Points:
- Over 10,000 WordPress sites vulnerable due to HT Contact Form Widget plugin.
- Three critical vulnerabilities: Arbitrary File Upload, Deletion, and Moving.
- Most severe flaw has a CVSS score of 9.8, enabling remote code execution.
- Wordfence released a patch five days after disclosure to the developer.
- Site owners urged to update plugin and apply security measures.
Already a member? Log in here