WordPress Plugin Flaw Exposes 10k+ Websites to Cyber Attacks

A critical vulnerability in the WP Datepicker WordPress plugin was identified, affecting over 10,000 active installations.  This Arbitrary Options Update vulnerability (CVE-2024-3895) has been assigned a CVSS score of 8.8, indicating a high severity level. CVE-2024-3895: Arbitrary Options Update Vulnerability in WP Datepicker Plugin This vulnerability could be exploited by authenticated attackers with subscriber-level access […]

The post WordPress Plugin Flaw Exposes 10k+ Websites to Cyber Attacks appeared first on Cyber Security News.

attacks critical critical vulnerability cve cve-2024 cvss cvss score cyber cyber-attack cyber attacks cyber security exploited flaw high options plugin score severity update vulnerability websites wordpress wordpress plugin wordpress plugin flaw