Our takeCISA added this actively exploited RCE in a WordPress plugin to its KEV catalog. Patch it now if you run the affected plugin.Security Resilience desk
Sources (1)
- bleeping · bleeping
What this means for you — Security leader:Update all self-hosted WordPress sites and plugins to the latest versions immediately. The flaw is confirmed actively exploited per CISA KEV listing.
What this means for you — Lean IT orgs:If you run your own WordPress site, update it and all plugins to the newest versions right now. This flaw is already being used in real attacks.
What this means for you — MSP:Audit all managed WordPress instances for the patched RCE; push updates across client environments and verify they applied. CISA lists it as actively exploited.
What this means for you — Researcher:CISA added this WordPress RCE to KEV. Review the patch diff and exploitation patterns as they surface.