WordPress plugin with over a million installs may have a worrying security flaw - here's what we know

TechRadarThursday, November 20, 2025 at 4:03:00 PM
NegativeTechnology
WordPress plugin with over a million installs may have a worrying security flaw - here's what we know
  • A critical flaw in a popular WordPress plugin has been identified, enabling threat actors to run arbitrary PHP commands and potentially take over entire websites. This vulnerability poses a serious risk to the security of numerous WordPress installations.
  • The discovery of this flaw is particularly alarming given the plugin's extensive user base, which exceeds one million installations. Website owners are urged to assess their security measures to mitigate potential risks.
  • This incident reflects a broader trend of increasing vulnerabilities in widely used software, as seen with recent security issues in other platforms like Google Chrome. The ongoing challenges in cybersecurity highlight the need for continuous vigilance and improvement in security practices across the tech industry.
— via World Pulse Now AI Editorial System

Was this article worth reading? Share it

Recommended Readings
Microsoft says Copilot will 'finish your code before you finish your coffee' provoking another barrage of anti-AI and Windows 11 sentiment
NegativeTechnology
Microsoft has announced that its Copilot feature will be able to complete coding tasks quickly, claiming it can 'finish your code before you finish your coffee.' This announcement has led to a wave of negative reactions from Windows 11 users, who have responded with trolling and criticism regarding the AI's capabilities and implications.
Google launches Nano Banana Pro, a massive leap in AI image editing powered by Gemini 3 Pro
PositiveTechnology
Google has launched the Nano Banana Pro, an advanced AI image editing tool built on the Gemini 3 Pro model. This new tool enhances the visualization of information, utilizing Gemini's sophisticated reasoning and real-world knowledge to generate more realistic images than ever before.
Bridging the real digital gap in the public sector
NeutralTechnology
Bridging the digital divide in the public sector requires a focus on people rather than solely on technology. This approach emphasizes the importance of human factors in successfully implementing digital solutions within public institutions.
Fortinet admits it found another worrying zero-day being exploited in attacks
NegativeTechnology
Fortinet has identified a new zero-day vulnerability affecting multiple versions of its FortiWeb web application firewall, which is currently being exploited in cyberattacks. A patch has been made available to address this issue.
How cloud-based technology is helping contact centers cut carbon emissions
PositiveTechnology
Cloud-based contact centers are significantly reducing carbon emissions while enhancing operational efficiency and sustainability objectives. This technology allows for more flexible and scalable solutions, contributing to a greener approach in customer service operations.
China’s PlushDaemon group uses EdgeStepper implant to infect network devices with SlowStepper malware in global supply-chain attacks
NegativeTechnology
ESET has reported that the Chinese cyber group PlushDaemon is utilizing the EdgeStepper implant to compromise network devices globally with SlowStepper malware. This development highlights the group's capability to launch supply-chain attacks on a worldwide scale.
Malicious free VPN extension makes a comeback
NegativeTechnology
Two malicious extensions named 'Free Unlimited VPN' have been stealing user data for years. Although they were removed in May 2025, a new version has resurfaced on the Chrome Store, raising concerns about user privacy and data security.
Some Spotify fans are still experiencing a major app crashing problem – and there’s still no sign of a fix
NegativeTechnology
Spotify users are facing a significant app crashing issue that has disrupted their music experience for several days. Despite ongoing complaints, there is currently no indication of a fix from the company.