A vulnerability advisory was issued for a WordPress plugin that saves contact form submissions. The flaw enables unauthenticated attackers to delete files, launch a denial of service attack, or ...

A vulnerability advisory was issued for a WordPress Contact Form 7 add-on plugin that enables unauthenticated attackers to “easily” launch a remote code execution. The vulnerability is rated high (8.8 ...

Check its WordPress.org listing for the last-updated date, the number of active installations, and its support responsiveness. A plugin actively maintained with a large install base and recent updates ...

The premium WordPress plugin 'Gravity Forms,' currently used by over 930,000 websites, is vulnerable to unauthenticated PHP Object Injection. Gravity Forms is a custom form builder website owners use ...

EmDash plugin security gets a rethink as Cloudflare's CMS 1.0 isolates each plugin behind admin-approved permissions and ...