Search
Several cybersecurity firms have issued warnings that hackers are actively exploiting vulnerabilities in WordPress websites. According to estimates from a security agency on Monday, tens of millions of WordPress sites globally are currently at significant risk. These vulnerabilities arise from flaws in REST API route obfuscation and SQL injection (CVE-2026-63030, CVE-2026-60137) within the core WordPress code, enabling attackers to execute unauthorized code without requiring authentication. The affected versions include 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1. To address these issues, the official WordPress team has released updates 6.9.5 and 7.0.2, which include patches for the vulnerabilities and have enabled automatic updates as a mandatory measure.
-
C114 Communication Network -
Communication Home
