Security News > 2025 > March > WordPress security plugin WP Ghost vulnerable to remote code execution bug

2025-03-20 14:58
Popular WordPress security plugin WP Ghost is vulnerable to a critical severity flaw that could allow unauthenticated attackers to remotely execute code and hijack servers. [...]
News URL
Related news
- Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers (source)
- Why remote work is a security minefield (and what you can do about it) (source)
- ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK? (source)
- WordPress plugin disguised as a security tool injects backdoor (source)