Matt Mullenweg Reinstated as Automattic CEO After Brief Leave
Matt Mullenweg has returned as CEO of Automattic just two days after being placed on paid leave, amid allegations of internal conflict.
Tag WordPress
Automattic CEO Matt Mullenweg Placed on Leave by Board
Matt Mullenweg, the CEO of Automattic, has been put on a paid leave of absence by the company's board, a decision he opposed. CFO Mark Davies has been appointed as interim CEO.
Exploitation Attempts Surge Against WordPress Plugin Vulnerabilities
Recent findings reveal over 440,000 exploit attempts targeting critical vulnerabilities in WordPress plugins Super Forms and Elementor Pro.
Critical Vulnerabilities Discovered in Popular WordPress Plugins and Themes
Multiple severe security flaws have been identified in several WordPress plugins and themes, potentially allowing unauthorized access and remote code execution.
StopAndProtect Campaign Exploits Nearly 2,000 Hacked WordPress Sites for Malware Distribution
A global cybercrime operation known as StopAndProtect has been identified, utilizing thousands of compromised WordPress websites to spread malware and steal sensitive data.
New wp2shell Vulnerability in WordPress Allows Code Execution by Unauthenticated Users
A critical vulnerability in WordPress, identified as wp2shell, enables unauthenticated attackers to execute code on affected sites. This flaw affects versions 6.9 and 7.0, with patches now available.
Supply Chain Attack Compromises ShapedPlugin WordPress Pro Plugins
A supply chain attack has led to the compromise of multiple Pro plugins from ShapedPlugin, affecting users who installed updates through official channels.
Operation Endgame Disrupts SocGholish Infrastructure and Cleans Infected WordPress Sites
A collaborative effort by law enforcement agencies has led to the disruption of SocGholish's malicious infrastructure, impacting nearly 15,000 WordPress sites worldwide.
Exploitation of Gravity SMTP Plugin Vulnerability Exposes Sensitive Data
A security flaw in the Gravity SMTP WordPress plugin has been exploited by attackers to access sensitive information from approximately 100,000 sites. The vulnerability allows unauthenticated access to configuration data, including API keys and secrets.
Crypto Clipper Campaign Exploits Fake Reviews and AI Narrators
A recent campaign has been uncovered that uses deceptive tactics to promote a cryptocurrency clipboard hijacker, targeting unsuspecting users through manipulated online platforms.
