Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

A critical security flaw has been disclosed in the WPML WordPress multilingual plugin that could allow authenticated users to execute arbitrary code remotely under certain circumstances. The vulnerability, tracked as CVE-2024-6386 CVSS score: 9.9, impacts all versions of the plugin before 4.6.13,...

1,000,000 WordPress Sites Protected Against Unique Remote Code Execution Vulnerability in WPML WordPress Plugin

Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors? Through October 14th, researchers can earn up to $31,200, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and ...

CVE-2024-6386

creationtimestamp| type| source ---|---|--- 2024-08-22 00:07:09+00:00| seen| https://t.me/cvedetector/3845 2024-08-27 04:05:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8374 2024-08-28 06:18:06+00:00| seen| https://t.me/thehackernews/5485 2024-08-28 08:58:42+00:00|...