The 4 WordPress flaws hackers targeted the most in Q1 2025
ID: ba8218d5-ec43-5094-956e-ff2397712bde
STIX ID: report--ba8218d5-ec43-5094-956e-ff2397712bde
Feed Name: Bleeping Computer
Threat Score
A Patchstack report highlights Q1 2025's most targeted WordPress flaws — four critical 2024-disclosed vulnerabilities (Automatic plugin SQLi CVE-2024-27956, Startklar Elementor Addons file upload CVE-2024-4345, Bricks theme RCE CVE-2024-25600, and GiveWP PHP object injection CVE-2024-8353) — many still unpatched across sites and observed in active exploitation or mass probing; site owners are advised to update plugins/themes, remove unneeded add-ons, and strengthen administrative authentication.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.