PSA: Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin

The Wordfence Threat Intelligence Team has recently been informed of a phishing campaign targeting WordPress users. The Phishing email claims to be from the WordPress team and warns of a Remote Code Execution vulnerability on the users site with an identifier of CVE-2023-45124, which is not...

Cross-site Request Forgery (CSRF)

gleez/cms is vulnerable to cross-site request forgery CSRF attacks. The library does not have any CSRF tokens to prevent CSRF attacks, allowing a malicious administrator user to add another administrator user through the URL...