VAST VIEW CISA Sounds Alarm: Hackers Are Actively Exploiting Newly Patched WordPress Flaw
The US cybersecurity agency warns federal agencies that a high-severity WordPress vulnerability is already being exploited in real-world attacks, just after a patch was released.
Photo by Tumisu via Pixabay
The Cybersecurity and Infrastructure Security Agency has issued a warning that a recently patched, high-severity vulnerability in WordPress is now being actively exploited by attackers, according to BleepingComputer. The flaw allows remote code execution, meaning hackers could potentially take control of vulnerable websites.
CISA added the bug to its list of known exploited vulnerabilities, a designation that requires federal agencies to apply the fix on a mandated timeline, BleepingComputer reported. The warning comes shortly after the vulnerability was patched, underscoring how quickly attackers moved to weaponize it once it became public.
Because WordPress powers a massive share of websites globally, security researchers are urging site administrators beyond just federal agencies to update immediately to avoid falling victim to attacks exploiting the flaw.
Sources: BleepingComputer
More from Cyber
A federal grand jury has indicted two Canadian nationals accused of breaking into multiple US university computer systems and secretly using them to mine cryptocurrency.
WorkOS confirms a breach of its internal sales system after a hacker used an AI tool called ARTEX to pull business contacts and customer communication summaries.
A state-linked Chinese hacking group reportedly used an open-source AI penetration-testing framework called ARTEX to automate intrusions across 14 countries, according to BleepingComputer.