A critical WordPress Plugin Arbitrary File Upload Vulnerability has been discovered in the Security & Malware Scan by CleanTalk WordPress plugin, putting over 30,000 websites at risk. In 2024, over 4,400 vulnerabilities were reported in the WordPress ecosystem, with plugins accounting for approximately 97% of these security issues. The “Security & Malware Scan by CleanTalk” […]
Hackers have targeted the WordPress Calendar plugin, a widely used WordPress tool with over 150,000 active installations. This significant security flaw, identified as an Arbitrary File Upload flaw (CVE-2024-5441), allows authenticated users, such as subscribers, to upload arbitrary files to a vulnerable site, potentially leading to remote code execution (RCE). The vulnerability was discovered on […]