{ads}

›

Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

Written By Tuesday 27 August 2024 Add Comment



August 28, 2024 at 09:44AM

A critical security flaw has been disclosed in the WPML WordPress multilingual plugin that could allow authenticated users to execute arbitrary code remotely under certain circumstances. The vulnerability, tracked as CVE-2024-6386 (CVSS score: 9.9), impacts all versions of the plugin before 4.6.13, which was released on August 20, 2024. Arising due to missing input validation and sanitization,

from The Hacker News https://ift.tt/yw7NXzv

0 Response to "Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution"

Post a Comment

Subscribe to: Post Comments (Atom)

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads