
Vulnerabilities
WordPress plugin flaw allows low-level users to execute remote code
A critical vulnerability in the Snazzy Social Media Feed plugin enables authenticated subscribers to upload executable files, risking full server compromise.
Everything AppSec Scoop has reported about WordPress: 2 stories, newest first. Part of our Vulnerabilities coverage.

A critical vulnerability in the Snazzy Social Media Feed plugin enables authenticated subscribers to upload executable files, risking full server compromise.

A critical vulnerability in the Stargaze WordPress theme allows unauthenticated attackers to inject PHP objects, posing a severe risk to organisations running versions up to 1.10.