Veille cybersecurite : Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Source : The Hacker News
Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.
The vulnerabilities, according to Wordfence and Patchstack, are listed below –
CVE-2026-76581 (CVSS score: 9.8) – An authentication bypass flaw in
Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.