02-11-2021 , 06:37 PM
Quote:Critical and high severity vulnerabilities in the Responsive Menu WordPress plugin exposed over 100,000 sites to takeover attacks as discovered by Wordfence.
Responsive Menu is a WordPress plugin designed to help admins create W3C compliant and mobile-ready responsible site menus.
Flaws patched last month
In all, the Wordfence Threat Intelligence team found three vulnerabilities that can be exploited by attackers with basic user permissions to upload arbitrary files and remotely execute arbitrary code.
The first flaw enables authenticated attackers to upload arbitrary files which eventually allows them to achieve remote code execution.
Continue reading HERE