May 30, 2024, 1:49 p.m. | info@thehackernews.com (The Hacker News)

The Hacker News thehackernews.com

Cybersecurity researchers have warned that multiple high-severity security vulnerabilities in WordPress plugins are being actively exploited by threat actors to create rogue administrator accounts for follow-on exploitation.
"These vulnerabilities are found in various WordPress plugins and are prone to unauthenticated stored cross-site scripting (XSS) attacks due to inadequate input sanitization

accounts actively exploited administrator attacks cross-site cross-site scripting (xss) attacks cybersecurity exploitation exploited found high input plugin plugins plugin vulnerabilities researchers rogue scripting security severity threat threat actors unauthenticated uncover vulnerabilities wordpress wordpress plugin wordpress plugins xss

Sr. Staff Solution Engineer

@ SentinelOne | India

Senior DevOps Engineer

@ Kontakt.io | remote in Poland

Account Executive

@ Darktrace | Munich

Professional Services Engineer

@ Nozomi Networks | Chile

Professional Services Engineer

@ Nozomi Networks | Mexico

Professional Services Engineer

@ Nozomi Networks | Costa Rica