News

WordPress Plugin Bug Lets Subscribers Wipe Sites

  • Lisa Vaas--Threatpost
  • published date: 2021-10-27 21:39:11 UTC

The flaw, found in the Hashthemes Demo Importer plugin, allows any authenticated user to exsanguinate a vulnerable WordPress site, deleting nearly all database content and uploaded media.

Continue Reading at Threatpost →