Serious flaw found and patched in WordPress, but it might lurk in plugins
The bug appears in WordPress instances prior to version 4.9.9 and was exploitable for as long as six years, the RIPS Technologies researchers said.
WordPress plugin patches flaw that gave hackers potential access to 40,000 websites
The plugin Simple Social Buttons allows Wordpress users to distribute content on social media platforms. The flaw was discovered by a security developer at WebARX.
Former WPML employee hacks plugin website to spam customers
The makers of the WPML plugin said they're taking legal action against the attacker.