Topic
WordPress
-
News Security & privacy
Attackers are exploiting a flaw in WordPress itself, US cyber agency says; fixes go back to version 4.7
The flaw can let an unauthenticated attacker run code on some sites, depending on the theme and server set-up. WordPress released fixes on 22 September; CISA listed it as exploited on 25 September.